Wazuh informational stable xml

Ignored common NTFS ADS entries.

Detection Logic

^NTFS Alternate data stream found
Thumbs.db:encryptable'.
| :Zone.Identifier'.
| Exchsrvr/Mailroot/vsi

Loading…

Loading comments...