Add _target field to record for Defender exclusion (#845)

fox-it · Sep 13, 2024 · c5bf1ed · c5bf1ed
1 parent 4533ba8
commit c5bf1ed
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/dissect/target/plugins/os/windows/defender.py b/dissect/target/plugins/os/windows/defender.py
@@ -517,6 +517,7 @@ def exclusions(self) -> Iterator[DefenderExclusionRecord]:
                         regf_mtime=exclusion_type_subkey.timestamp,
                         type=exclusion_type,
                         value=exclusion_value,
+                        _target=self.target,
                     )
 
     def _mplog_processimage(self, data: dict) -> Iterator[DefenderMPLogProcessImageRecord]: