diff --git a/EDRSilencer.c b/EDRSilencer.c index 3c849d2..c748921 100644 --- a/EDRSilencer.c +++ b/EDRSilencer.c @@ -9,7 +9,9 @@ char* edrProcess[] = { "elastic-endpoint.exe", "filebeat.exe", // Trellix EDR - "xagt.exe" + "xagt.exe", +// Qualys EDR + "QualysAgent.exe", }; BOOL inWfpFlag[sizeof(edrProcess) / sizeof(edrProcess[0])] = { FALSE };