Hi Dan,
On Mon, Jun 13, 2011 at 8:53 AM, 2secureit <2secur...@gmail.com> wrote:
>
> 510
> ^Application Found
> alert_by_email
> Windows application monitor event.
> rootcheck,
>
>
> This is in my local rules and has not sent an email, however if I look
> at rootcheck there is da
510
^Application Found
alert_by_email
Windows application monitor event.
rootcheck,
This is in my local rules and has not sent an email, however if I look
at rootcheck there is data/matches in there. \
Also in the msauth rules when an application is installed or
uninstal
