Used asterisk for Defender Firewall log name (#2671)

Log name is configurable. MD Docs recommend a log file per profile: https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/windows-firewall/configure-logging?tabs=intune
crowdsecurity · Dec 20, 2023 · e1932ff · e1932ff
1 parent 052accd
commit e1932ff
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/config/acquis_win.yaml b/config/acquis_win.yaml
@@ -10,7 +10,7 @@ labels:
 ---
 ##Firewall
 filenames:
-  - C:\Windows\System32\LogFiles\Firewall\pfirewall.log
+  - C:\Windows\System32\LogFiles\Firewall\*.log
 labels:
   type: windows-firewall
 ---
@@ -28,4 +28,4 @@ use_time_machine: true
 filenames:
   - C:\inetpub\logs\LogFiles\*\*.log
 labels:
-  type: iis
+  type: iis