Hi, all: I'm currently building a Firefox 10 analysis environment. Firefox 10 create new process called plugin-container.exe. I want to write a rule in my ProcessMonitor.exl to exclude this process. So question is, how to deal with "-" in the .exl file? It should be "plugin\-container" or "plugin-container"?
################################################### ### Firefox 10 ### ################################################### + plugin-container.exe .* C:\\Program Files\\Mozilla Firefox\\plugin-container\.exe Or is there any .exl file already for Firefox 10? Thanks Ming-Yen, Hsieh
_______________________________________________ Capture-HPC mailing list Capture-HPC@public.honeynet.org https://public.honeynet.org/mailman/listinfo/capture-hpc