id 11 exempt
ceramic-skate0 opened this issue · comments
Image: C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.14729.20260\OfficeClickToRun.exe
TargetFilename: C:\Program Files\Microsoft Office\Updates\Download\PackageFiles*
ceramicskate0 / sysmon-config
CeramicSkate0 Sysmon configuration fork file template with default high-quality event tracing