ignore-uuid-list.txt

# This file contained rules that would cause Windows Defender alerts but now we do not ignore them as users can use the live response release that encodes the rules so that there will not be any Defender false positives.
#ec19ebab-72dc-40e1-9728-4c0b805d722c # Tamper Windows Defender - PSClassic
#14c71865-6cd3-44ae-adaa-1db923fae5f2 # Tamper Windows Defender - ScriptBlockLogging
#30edb182-aa75-42c0-b0a9-e998bb29067c # Potential AMSI Bypass Via .NET Reflection
#0f06a3a5-6a09-413f-8743-e6cf35561297 # Looks for any Sysmon WMI event but is better handled with Hayabusa rules