From 756b8eed26d8c10d5ffdf64e366dfaeb30ac4016 Mon Sep 17 00:00:00 2001 From: Andreas Hunkeler Date: Mon, 28 Jun 2021 12:10:16 +0200 Subject: [PATCH] Add Synergy as possible FP for PortProxy key --- rules/windows/registry_event/win_portproxy_registry_key.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/rules/windows/registry_event/win_portproxy_registry_key.yml b/rules/windows/registry_event/win_portproxy_registry_key.yml index a6affc166..2559c6202 100644 --- a/rules/windows/registry_event/win_portproxy_registry_key.yml +++ b/rules/windows/registry_event/win_portproxy_registry_key.yml @@ -22,4 +22,5 @@ detection: condition: selection_registry falsepositives: - WSL2 network bridge PowerShell script used for WSL/Kubernetes/Docker (e.g. https://github.com/microsoft/WSL/issues/4150#issuecomment-504209723) + - Synergy Software KVM (https://symless.com/synergy) level: medium