Format/Sysmon.Rule.ps1xml

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
<?xml version="1.0" encoding="utf-16"?>
<Configuration>
<ViewDefinitions>
<View>
    <Name>Sysmon.Rule</Name>
    <ViewSelectedBy>
        <TypeName>Sysmon.Rule</TypeName>
    </ViewSelectedBy>
    <ListControl>
        <ListEntries>
            <ListEntry>
                <ListItems>
                    <ListItem>
                        <Label>EventType</Label>
                        <PropertyName>EventType</PropertyName>
                    </ListItem>
                    <ListItem>
                        <Label>Scope</Label>
                        <PropertyName>Scope</PropertyName>
                    </ListItem>
                    <ListItem>
                        <Label>DefaultAction</Label>
                        <PropertyName>DefaultAction</PropertyName>
                    </ListItem>
                    <ListItem>
                        <Label>Filters</Label>
                        <PropertyName>Filters</PropertyName>
                    </ListItem>
                    </ListItems>
            </ListEntry>
        </ListEntries>
    </ListControl>
</View>
</ViewDefinitions>
</Configuration>