From f2545eef50116c40a339fd29cfdab40a47c37f91 Mon Sep 17 00:00:00 2001
From: Olaf Hartong <olafhartong@Olafs-MacBook-Pro.local>
Date: Sun, 13 May 2018 11:42:27 +0200
Subject: [PATCH] added olafhartong sysmon-modular config

---
 Vagrant/scripts/install-sysinternals.ps1 | 10 ++--------
 1 file changed, 2 insertions(+), 8 deletions(-)

diff --git a/Vagrant/scripts/install-sysinternals.ps1 b/Vagrant/scripts/install-sysinternals.ps1
index 20379b4..48c6818 100755
--- a/Vagrant/scripts/install-sysinternals.ps1
+++ b/Vagrant/scripts/install-sysinternals.ps1
@@ -32,14 +32,8 @@ Invoke-WebRequest -Uri "https://live.sysinternals.com/Sysmon64.exe" -Outfile $sy
 Invoke-WebRequest -Uri "https://live.sysinternals.com/Tcpview.exe" -Outfile $tcpviewPath
 Copy-Item $sysmonPath $sysmonDir
 
-# Download SwiftOnSecurity's Sysmon config
-Invoke-WebRequest -Uri "https://raw.githubusercontent.com/SwiftOnSecurity/sysmon-config/master/sysmonconfig-export.xml" -Outfile "$sysmonConfigPath"
-
-# Convert Sysmon config schema from 3.30 to 4.0 per GitHub Issue #38
-(Get-Content $sysmonConfigPath) -replace 'schemaversion="3.30"', 'schemaversion="4.00"' | Set-Content $sysmonConfigPath
-
-# Convert Schema from 3.30 to 4.0 per GitHub Issue #38
-(Get-Content $sysmonConfigPath) -replace 'schemaversion="3.30"', 'schemaversion="4.00"' | Set-Content $sysmonConfigPath
+# Download Olaf Hartong's Sysmon config
+Invoke-WebRequest -Uri "https://raw.githubusercontent.com/olafhartong/sysmon-modular/master/sysmonconfig.xml" -Outfile "$sysmonConfigPath"
 
 # Startup Sysmon
 Write-Host "Starting Sysmon..."