Hello there,
I'm running Kali Linux in a VM and I want to add it's traffic to exclusions(Traffic from Kali VM Only). What's the best way to do it?
This is the event details.
Event: We found an application that can be used by intruders to damage your computer or personal data.
User: NT AUTHORITY\SYSTEM
User type: System user
Application name: vmnat.exe
Application path: C:\Windows\SysWOW64
Component: Safe Browsing
Result description: Detected
Type: Software that may cause harm
Name: HEUR:HackTool.Python.Impacket.gen
Precision: Heuristic Analysis
Threat level: Medium
Object type: File
Object name: dcomexec.py
Object path: http://kali.cs.nycu.edu.tw/kali/pool/main/i/impacket/python3-impacket_0.11.0-2_all.deb//data.tar.xz//data.tar//./usr/share/doc/python3-impacket/examples
MD5 of an object: 8FE1BDA637AF186BC0A95150FF16D264
Reason: Expert analysis
Databases release date: Today, 1/16/2024 1:52:00 AM
I can add vmnat.exe to exclusions, but it would ignore the scan for the other VMs too. Is there any best way to do it(Such as adding specific network adapter to the exclusions)?
Thank you.
