Add _target field to record for Defender exclusion

fox-it · Sep 10, 2024 · b3342da · b3342da
1 parent ca2c1ca
commit b3342da
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/dissect/target/plugins/os/windows/defender.py b/dissect/target/plugins/os/windows/defender.py
@@ -517,6 +517,7 @@ def exclusions(self) -> Iterator[DefenderExclusionRecord]:
                         regf_mtime=exclusion_type_subkey.timestamp,
                         type=exclusion_type,
                         value=exclusion_value,
+                        _target=self.target,
                     )
 
     def _mplog_processimage(self, data: dict) -> Iterator[DefenderMPLogProcessImageRecord]: