Extended Windows processes

2020-05-26 13:56:51 +02:00
parent f9f814f3b3
commit 3681b8cb56
1 changed files with 7 additions and 0 deletions
@@ -30,6 +30,13 @@ detection:
            - '*\winlogon.exe'
            - '*\explorer.exe'
            - '*\taskhost.exe'
+            - '*\Taskmgr.exe'
+            - '*\sihost.exe'
+            - '*\RuntimeBroker.exe'
+            - '*\smartscreen.exe'
+            - '*\dllhost.exe'
+            - '*\audiodg.exe'
+            - '*\wlanext.exe'
    filter:
        Image:
            - 'C:\Windows\System32\\*'