add ECS

jlaundry · Aug 23, 2024 · 0cf7352 · 0cf7352
1 parent e16ad5d
commit 0cf7352
Show file tree

Hide file tree

Showing 2 changed files with 32 additions and 0 deletions.
diff --git a/macos/little_snitch/config.json b/macos/little_snitch/config.json
@@ -30,6 +30,16 @@
                         1,
                         2
                     ]
+                },
+                {
+                    "url": "https://raw.githubusercontent.com/jlaundry/aadinfo/main/network/ecs.json",
+                    "rule_ids": [
+                        1
+                    ],
+                    "processes": [
+                        "\/Applications\/Microsoft Defender.app\/Contents\/MacOS\/Microsoft Defender.app\/Contents\/MacOS\/Microsoft Defender",
+                        "\/Applications\/Microsoft Defender.app\/Contents\/MacOS\/Microsoft Defender.app\/Contents\/MacOS\/Microsoft Defender Helper"
+                    ]
                 }
             ]
         },
@@ -112,6 +122,15 @@
                         56,
                         69
                     ]
+                },
+                {
+                    "url": "https://raw.githubusercontent.com/jlaundry/aadinfo/main/network/ecs.json",
+                    "rule_ids": [
+                        1
+                    ],
+                    "processes": [
+                        "\/Applications\/OneDrive.app\/Contents\/MacOS\/OneDrive"
+                    ]
                 }
             ]
         },
@@ -209,6 +228,12 @@
                         147,
                         159
                     ]
+                },
+                {
+                    "url": "https://raw.githubusercontent.com/jlaundry/aadinfo/main/network/ecs.json",
+                    "rule_ids": [
+                        1
+                    ]
                 }
             ]
         },

diff --git a/macos/little_snitch/rules/Microsoft Intune.lsrules b/macos/little_snitch/rules/Microsoft Intune.lsrules
@@ -51,6 +51,13 @@
       "protocol" : "tcp",
       "remote-domains" : "manage.microsoft.com"
     },
+    {
+      "action" : "allow",
+      "ports" : "443",
+      "process" : "\/Applications\/Company Portal.app\/Contents\/MacOS\/Company Portal",
+      "protocol" : "tcp",
+      "remote-hosts" : "config.edge.skype.com"
+    },
     {
       "action" : "allow",
       "ports" : "443",