Hi, all:

I'm currently building a Firefox 10 analysis environment.
Firefox 10 create new process called plugin-container.exe.
I want to write a rule in my ProcessMonitor.exl to exclude this process.
So question is, how to deal with "-" in the .exl file?
It should be "plugin\-container" or "plugin-container"?

###################################################
### Firefox 10                                  ###
###################################################
+       plugin-container.exe    .*      C:\\Program Files\\Mozilla
Firefox\\plugin-container\.exe

Or is there any .exl file already for Firefox 10?

Thanks
Ming-Yen, Hsieh
_______________________________________________
Capture-HPC mailing list
Capture-HPC@public.honeynet.org
https://public.honeynet.org/mailman/listinfo/capture-hpc

Reply via email to