Import from old repository

2020-04-06 18:48:34 +02:00
commit 0da6783a45
762 changed files with 103065 additions and 0 deletions
@@ -0,0 +1,14 @@
+9/27/2013	2:42:26 PM	Blocked by Access Protection rule 	SOMEDOMAIN\someUser	C:\Windows\System32\procexp64.exe	C:\Program Files (x86)\McAfee\Common Framework\UdaterUI.exe	Common Standard Protection:Prevent termination of McAfee processes	Action blocked : Terminate
+9/27/2013	2:42:39 PM	Blocked by Access Protection rule 	SOMEDOMAIN\someUser	C:\Windows\System32\procexp64.exe	C:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe	Common Standard Protection:Prevent termination of McAfee processes	Action blocked : Terminate
+9/27/2013	2:42:39 PM	Blocked by Access Protection rule 	SOMEDOMAIN\someUser	C:\Windows\System32\procexp64.exe	C:\Program Files (x86)\McAfee\Common Framework\UdaterUI.exe	Common Standard Protection:Prevent termination of McAfee processes	Action blocked : Terminate
+9/27/2013	2:42:40 PM	Blocked by Access Protection rule 	SOMEDOMAIN\someUser	C:\Windows\System32\procexp64.exe	C:\Program Files (x86)\McAfee\Common Framework\McTray.exe	Common Standard Protection:Prevent termination of McAfee processes	Action blocked : Terminate
+7/17/2013	1:49:34 PM	Would be blocked by Access Protection rule  (rule is currently not enforced) 	NT AUTHORITY\SYSTEM	C:\Windows\System32\powercfg.exe	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect	Anti-spyware Standard Protection:Protect Internet Explorer favorites and settings	Action blocked : Create
+7/17/2013	1:49:34 PM	Would be blocked by Access Protection rule  (rule is currently not enforced) 	NT AUTHORITY\SYSTEM	C:\Windows\System32\powercfg.exe	C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat	Anti-virus Maximum Protection:Protect cached files from password and email address stealers	Action blocked : Read
+7/17/2013	1:53:31 PM	Would be blocked by Access Protection rule  (rule is currently not enforced) 	TheGrid\clu	C:\Windows\system32\taskhost.exe	C:\Windows\Temp\SDIAG_1893e055-45e8-4dda-a6fc-036616ec15c7\DiagPackage.dll	Common Maximum Protection:Prevent creation of new executable files in the Windows folder	Action blocked : Create
+7/17/2013	1:53:32 PM	Would be blocked by Access Protection rule  (rule is currently not enforced) 	TheGrid\clu	C:\Windows\System32\sdiagnhost.exe	\REGISTRY\USER\S-1-5-21-218510691-2140962509-2033415169-18142\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect	Anti-spyware Standard Protection:Protect Internet Explorer favorites and settings	Action blocked : Create
+7/30/2013	10:06:05 AM	Would be blocked by Access Protection rule  (rule is currently not enforced) 	NT AUTHORITY\SYSTEM	C:\Windows\TEMP\InstallPlugin_11_8_800_94.exe	C:\Windows\Temp\{49568447-C9D4-4C19-942B-4472959CBC07}\fpb.tmp	Anti-spyware Maximum Protection:Prevent all programs from running files from the Temp folder	Action blocked : Execute
+7/30/2013	10:06:06 AM	Would be blocked by Access Protection rule  (rule is currently not enforced) 	NT AUTHORITY\SYSTEM	C:\Windows\TEMP\InstallPlugin_11_8_800_94.exe	C:\Windows\Temp\{05007B29-A945-4346-8B04-7DD2F5453280}\InstallFlashPlayer.exe	Common Maximum Protection:Prevent creation of new executable files in the Windows folder	Action blocked : Create
+7/30/2013	10:18:02 AM	Would be blocked by port blocking rule  (rule is currently not enforced) 	C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe	Common Maximum Protection:Prevent HTTP communication	23.56.2.70:443
+7/30/2013	10:22:48 AM	Would be blocked by Access Protection rule  (rule is currently not enforced) 	NT AUTHORITY\SYSTEM	C:\Windows\system32\svchost.exe	C:\Users\tron\AppData\Roaming\Mozilla\Firefox\prfD430.tmp	Common Standard Protection:Protect Mozilla & FireFox files and settings	Action blocked : Create
+7/30/2013	10:22:48 AM	Would be blocked by Access Protection rule  (rule is currently not enforced) 	NT AUTHORITY\SYSTEM	C:\Windows\system32\svchost.exe	C:\Users\tron\AppData\Roaming\Mozilla\Firefox\Profiles\w77xlhgl.default\webapps\prfD432.tmp	Common Standard Protection:Protect Mozilla & FireFox files and settings	Action blocked : Delete
+7/30/2013	10:22:48 AM	Would be blocked by Access Protection rule  (rule is currently not enforced) 	NT AUTHORITY\SYSTEM	C:\Windows\system32\svchost.exe	C:\Users\tron\AppData\Roaming\Mozilla\Firefox\Profiles\w77xlhgl.default\prfD431.tmp	Common Standard Protection:Protect Mozilla & FireFox files and settings	Action blocked : Create
@@ -0,0 +1,127 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<array>
+	<dict>
+		<key>date</key>
+		<date>2013-11-12T02:59:35Z</date>
+		<key>displayName</key>
+		<string>OS X</string>
+		<key>displayVersion</key>
+		<string>10.9 (13A603)</string>
+		<key>packageIdentifiers</key>
+		<array>
+			<string>com.apple.pkg.BaseSystemBinaries</string>
+			<string>com.apple.pkg.BaseSystemResources</string>
+			<string>com.apple.pkg.Essentials</string>
+			<string>com.apple.pkg.BSD</string>
+			<string>com.apple.pkg.JavaTools</string>
+			<string>com.apple.pkg.AdditionalEssentials</string>
+			<string>com.apple.pkg.AdditionalSpeechVoices</string>
+			<string>com.apple.pkg.AsianLanguagesSupport</string>
+			<string>com.apple.pkg.MediaFiles</string>
+			<string>com.apple.pkg.JavaEssentials</string>
+			<string>com.apple.pkg.OxfordDictionaries</string>
+			<string>com.apple.pkg.X11redirect</string>
+			<string>com.apple.pkg.OSInstall</string>
+			<string>com.apple.pkg.update.compatibility.2013.001</string>
+		</array>
+		<key>processName</key>
+		<string>OS X Installer</string>
+	</dict>
+	<dict>
+		<key>date</key>
+		<date>2013-12-28T04:38:11Z</date>
+		<key>displayName</key>
+		<string>VMware Tools</string>
+		<key>displayVersion</key>
+		<string>9.6.1</string>
+		<key>packageIdentifiers</key>
+		<array>
+			<string>com.vmware.tools.macos.pkg.files</string>
+		</array>
+		<key>processName</key>
+		<string>Installer</string>
+	</dict>
+	<dict>
+		<key>contentType</key>
+		<string>config-data</string>
+		<key>date</key>
+		<date>2013-12-28T12:14:43Z</date>
+		<key>displayName</key>
+		<string>XProtectPlistConfigData</string>
+		<key>displayVersion</key>
+		<string>1.0</string>
+		<key>packageIdentifiers</key>
+		<array>
+			<string>com.apple.pkg.XProtectPlistConfigData.2-45</string>
+		</array>
+		<key>processName</key>
+		<string>softwareupdated</string>
+	</dict>
+	<dict>
+		<key>contentType</key>
+		<string>config-data</string>
+		<key>date</key>
+		<date>2013-12-28T12:14:43Z</date>
+		<key>displayName</key>
+		<string>Core Services Application Configuration Data</string>
+		<key>displayVersion</key>
+		<string>1.0.25</string>
+		<key>packageIdentifiers</key>
+		<array>
+			<string>com.apple.pkg.CoreServicesAppConfigData.2-9</string>
+		</array>
+		<key>processName</key>
+		<string>softwareupdated</string>
+	</dict>
+	<dict>
+		<key>contentType</key>
+		<string>config-data</string>
+		<key>date</key>
+		<date>2013-12-28T12:14:43Z</date>
+		<key>displayName</key>
+		<string>Incompatible Kernel Extension Configuration Data</string>
+		<key>displayVersion</key>
+		<string>1.18.2</string>
+		<key>packageIdentifiers</key>
+		<array>
+			<string>com.apple.pkg.IncompatibleKextConfigData.3-9</string>
+		</array>
+		<key>processName</key>
+		<string>softwareupdated</string>
+	</dict>
+	<dict>
+		<key>contentType</key>
+		<string>config-data</string>
+		<key>date</key>
+		<date>2013-12-28T12:14:43Z</date>
+		<key>displayName</key>
+		<string>Chinese Word List Update</string>
+		<key>displayVersion</key>
+		<string>2.1</string>
+		<key>packageIdentifiers</key>
+		<array>
+			<string>com.apple.pkg.ChineseWordlistUpdate.5-17</string>
+		</array>
+		<key>processName</key>
+		<string>softwareupdated</string>
+	</dict>
+	<dict>
+		<key>contentType</key>
+		<string>config-data</string>
+		<key>date</key>
+		<date>2014-01-28T20:38:48Z</date>
+		<key>displayName</key>
+		<string>Chinese Word List Update</string>
+		<key>displayVersion</key>
+		<string>2.2</string>
+		<key>packageIdentifiers</key>
+		<array>
+			<string>com.apple.pkg.ChineseWordlistUpdate.5-30</string>
+		</array>
+		<key>processName</key>
+		<string>softwareupdated</string>
+	</dict>
+</array>
+</plist>
@@ -0,0 +1,8 @@
+2A0A1E011B21,7,3,8,SQLZZSERVEDD,SYSTEM,,,,,,,16777216,"New virus definition file loaded. Version: 141129w.",0,,0,,,,,0,,,,,,,,,,,{AAAAAAA-4F7F-4896-8C5A-5CEDFB6A9DC0},,,,BUSINES1,00:30:12:9C:58:3B,11.0.4000.290,,,,,,,,,,,,,,,,0,,,,,
+2A0A1E0A2F1D,5,1,2,SQLZZSERVEDD,davnads,W32.Changeup!gen33,D:\Twinkle_Prod$\VM11 XXX\outside\test.exe.txt,5,3,14,256,39866436,"",0,,0,201	4	6	1	65542	0	0	0	0	0	0,0,54202,0,1,0,0,0,0,,0,2,4,0,,{AAAAAAA-4F7F-4896-8C5A-5CEDFB6A9DC0},,,,BUSINES1,00:30:12:9C:58:3B,11.0.4000.290,,,,,,,,,,,,,,,,0,,74ac79f8-d0c0-4065-acd7-27af2fc7ec4c,0,,
+2A0A1E0A300E,46,1,2,SQLZZSERVEDD,davnads,W32.Changeup!gen23,D:\Twinkle_Prod$\VM11 XXX\outside\test.exe.txt,5,3,19,256,33554436,"",1354297652,,0,101	{A149F6F3-67B6-4D50-8A50-82E44938E96E}	0	1				W32.Changeup!gen23	2;0;13	0	0	74ac79f8-d0c0-4065-acd7-27af2fc7ec4c	0,0,54202,0,0,0,,,0,,0,0,1,0,,{AAAAAAA-4F7F-4896-8C5A-5CEDFB6A9DC0},,,,BUSINES1,00:30:12:9C:58:3B,11.0.4000.290,,,,,,,,,,,,,,,,999,,7v220ss1-3339-4e86-b06e-291ca5a2a87d,0,,
+2A0A1E0A300E,5,1,2,SQLZZSERVEDD,davnads,W32.Changeup!gen23,D:\Twinkle_Prod$\VM11 XXX\outside\test.exe.txt,5,3,19,256,39866436,"",1354297652,,0,201	4	6	1	65542	0	0	0	0	0	0,1488777566,54202,0,1,0,0,0,0,,0,2,4,1488777566,,{AAAAAAA-4F7F-4896-8C5A-5CEDFB6A9DC0},,,,BUSINES1,00:30:12:9C:58:3B,11.0.4000.290,,,,,,,,,,,,,,,,0,,7v220ss1-3339-4e86-b06e-291ca5a2a87d,405536768,,
+2A0A1E0A300E,50,1,2,SQLZZSERVEDD,davnads,,Internet browser temporary file cache,5,3,3,256,4,"",1354297652,,0,101		0	0	Browser Cache Remediation	Delete	Internet browser temporary file cache			2011	1	74ac79f8-d0c0-4065-acd7-27af2fc7ec4c	0,0,54202,0,0,0,,,0,,0,0,4,0,,{AAAAAAA-4F7F-4896-8C5A-5CEDFB6A9DC0},,,,BUSINES1,00:30:12:9C:58:3B,11.0.4000.290,,,,,,,,,,,,,,,,0,,7v220ss1-3339-4e86-b06e-291ca5a2a87d,0,,
+2A0A1E0A300E,51,1,2,SQLZZSERVEDD,davnads,W32.Changeup!gen33,D:\Twinkle_Prod$\VM11 XXX\outside\test.exe.txt,5,3,19,256,37748804,"",1354297652,,0,101	{A149F6F3-67B6-4D50-8A50-82E44938E96E}	0	2				W32.Changeup!gen23	2;0;13	0	0	74ac79f8-d0c0-4065-acd7-27af2fc7ec4c	0,405536768,54202,0,0,0,,,0,,0,0,1,0,,{AAAAAAA-4F7F-4896-8C5A-5CEDFB6A9DC0},,,,BUSINES1,00:30:12:9C:58:3B,11.0.4000.290,,,,,,,,,,,,,,,,999,,7v220ss1-3339-4e86-b06e-291ca5a2a87d,405536768,,
+2A0A1E0C0427,7,3,8,SQLZZSERVEDD,SYSTEM,,,,,,,16777216,"New virus definition file loaded. Version: 141130b.",0,,0,,,,,0,,,,,,,,,,,{AAAAAAA-4F7F-4896-8C5A-5CEDFB6A9DC0},,,,BUSINES1,00:30:12:9C:58:3B,11.0.4000.290,,,,,,,,,,,,,,,,0,,,,,
+2A0A1E100602,7,3,8,SQLZZSERVEDD,SYSTEM,,,,,,,16777216,"New virus definition file loaded. Version: 122230r.",0,,0,,,,,0,,,,,,,,,,,{AAAAAAA-4F7F-4896-8C5A-5CEDFB6A9DC0},,,,BUSINES1,00:30:12:9C:58:3B,11.0.4000.290,,,,,,,,,,,,,,,,0,,,,,
@@ -0,0 +1,58 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>ConfigurationCreationDate</key>
+	<date>2013-05-27T12:23:50Z</date>
+	<key>ConfigurationCreationVersion</key>
+	<string>Version 10.8 (Build 12A269)</string>
+	<key>ConfigurationModificationDate</key>
+	<date>2013-06-25T05:54:43Z</date>
+	<key>ConfigurationModificationVersion</key>
+	<string>Version 10.8.4 (Build 12E3067)</string>
+	<key>Exclusions</key>
+	<array/>
+	<key>Options</key>
+	<dict>
+		<key>ConfigurationType</key>
+		<string>Default</string>
+	</dict>
+	<key>Stores</key>
+	<dict>
+		<key>4D4BFEB5-7FE6-4033-AAAA-AAAABBBBCCCCDDDD</key>
+		<dict>
+			<key>CreationDate</key>
+			<date>2013-06-25T05:54:43Z</date>
+			<key>CreationVersion</key>
+			<string>Version 10.8.4 (Build 12E3067)</string>
+			<key>IndexVersion</key>
+			<integer>95</integer>
+			<key>PartialPath</key>
+			<string>/.MobileBackups</string>
+			<key>PolicyDate</key>
+			<date>2013-06-25T05:54:43Z</date>
+			<key>PolicyLevel</key>
+			<string>kMDConfigSearchLevelReadWrite</string>
+			<key>PolicyVersion</key>
+			<string>Version 10.8.4 (Build 12E3067)</string>
+		</dict>
+		<key>AA82EDD7-613C-45E6-82EF-AAAABBBBCCCCDDDD</key>
+		<dict>
+			<key>CreationDate</key>
+			<date>2013-05-27T12:27:36Z</date>
+			<key>CreationVersion</key>
+			<string>Version 10.8 (Build 12A269)</string>
+			<key>IndexVersion</key>
+			<integer>95</integer>
+			<key>PartialPath</key>
+			<string>/</string>
+			<key>PolicyDate</key>
+			<date>2013-05-27T12:27:37Z</date>
+			<key>PolicyLevel</key>
+			<string>kMDConfigSearchLevelReadWrite</string>
+			<key>PolicyVersion</key>
+			<string>Version 10.8 (Build 12A269)</string>
+		</dict>
+	</dict>
+</dict>
+</plist>
@@ -0,0 +1,16 @@
+#!/usr/bin/python
+# -*- coding: utf-8 -*-
+# Copyright 2012 The Plaso Project Authors.
+# Please see the AUTHORS file for details on individual authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
@@ -0,0 +1,47 @@
+Nov  2 04:07:35 DarkTemplar-2.local socketfilterfw[112] <Error>: Logging: creating /var/log/appfirewall.log
+Nov  2 04:07:35 DarkTemplar-2.local socketfilterfw[112] <Info>: Dropbox: Allow TCP LISTEN  (in:0 out:1)
+Nov  2 04:07:35 DarkTemplar-2.local socketfilterfw[112] <Info>: Notify: Allow TCP LISTEN  (in:0 out:1)
+Nov  2 13:02:08 DarkTemplar-2.local socketfilterfw[112] <Info>: Spotify: Allow TCP LISTEN  (in:0 out:2)
+Nov  2 17:05:39 DarkTemplar-2.local socketfilterfw[112] <Info>: Skype: Allow TCP LISTEN  (in:0 out:1)
+Nov  2 19:39:01 DarkTemplar-2.local socketfilterfw[112] <Info>: Skype: Allow TCP LISTEN  (in:0 out:1)
+Nov  3 03:07:29 DarkTemplar-2.local socketfilterfw[112] <Info>: Skype: Allow TCP LISTEN  (in:0 out:1)
+Nov  3 03:45:21 DarkTemplar-2.local socketfilterfw[87] <Info>: Dropbox: Allow TCP LISTEN  (in:0 out:1)
+Nov  3 03:45:21 DarkTemplar-2.local socketfilterfw[87] <Info>: Notify: Allow TCP LISTEN  (in:0 out:1)
+Nov  3 13:25:15 DarkTemplar-2.local socketfilterfw[87] <Info>: Dropbox: Allow TCP LISTEN  (in:0 out:1)
+Nov  3 13:25:15 DarkTemplar-2.local socketfilterfw[87] <Info>: Notify: Allow TCP LISTEN  (in:0 out:1)
+Nov  3 16:52:25 DarkTemplar-2.local socketfilterfw[87] <Info>: Dropbox: Allow TCP LISTEN  (in:0 out:1)
+Nov  3 16:52:25 DarkTemplar-2.local socketfilterfw[87] <Info>: Notify: Allow TCP LISTEN  (in:0 out:1)
+Nov  3 18:16:56 DarkTemplar-2.local socketfilterfw[87] <Info>: popup: Allow TCP LISTEN  (in:0 out:1)
+Nov  3 18:42:41 DarkTemplar-2.local socketfilterfw[87] <Info>: popup: Allow TCP LISTEN  (in:0 out:1)
+Nov  4 02:28:47 DarkTemplar-2.local socketfilterfw[87] <Info>: popup: Allow TCP LISTEN  (in:0 out:1)
+Nov 10 02:47:40 DarkTemplar-2.local socketfilterfw[87] <Info>: Spotify: Allow TCP LISTEN  (in:0 out:2)
+Nov 11 22:24:00 DarkTemplar-2.local socketfilterfw[87] <Info>: Skype: Allow TCP LISTEN  (in:0 out:1)
+Nov 11 22:44:00 DarkTemplar-2.local socketfilterfw[87] <Info>: Skype: Allow TCP CONNECT (in:1 out:0)
+Nov 11 22:54:00 DarkTemplar-2.local socketfilterfw[87] <Info>: Skype: Allow TCP CONNECT (in:1 out:0)
+Nov 11 23:16:01 DarkTemplar-2.local socketfilterfw[87] <Info>: Skype: Allow TCP CONNECT (in:1 out:0)
+Nov 11 23:18:31 DarkTemplar-2.local socketfilterfw[87] <Info>: Skype: Allow TCP CONNECT (in:1 out:0)
+Nov 12 18:45:06 DarkTemplar-2.local socketfilterfw[87] <Info>: popup: Allow TCP LISTEN  (in:0 out:1)
+Nov 12 18:52:17 DarkTemplar-2.local socketfilterfw[87] <Info>: popup: Allow TCP LISTEN  (in:0 out:1)
+Nov 12 18:56:25 DarkTemplar-2.local socketfilterfw[87] <Info>: popup: Allow TCP LISTEN  (in:0 out:1)
+Nov 12 22:11:32 DarkTemplar-2.local socketfilterfw[93] <Info>: Dropbox: Allow TCP LISTEN  (in:0 out:1)
+Nov 12 22:11:32 DarkTemplar-2.local socketfilterfw[93] <Info>: Notify: Allow TCP LISTEN  (in:0 out:1)
+Nov 13 01:55:05 DarkTemplar-2.local socketfilterfw[87] <Info>: Dropbox: Allow TCP LISTEN  (in:0 out:1)
+Nov 13 01:55:05 DarkTemplar-2.local socketfilterfw[87] <Info>: Notify: Allow TCP LISTEN  (in:0 out:1)
+Nov 13 17:53:09 DarkTemplar-2.local socketfilterfw[87] <Info>: Dropbox: Allow TCP LISTEN  (in:0 out:1)
+Nov 13 17:53:09 DarkTemplar-2.local socketfilterfw[87] <Info>: Notify: Allow TCP LISTEN  (in:0 out:1)
+Nov 13 18:48:10 DarkTemplar-2.local socketfilterfw[87] <Info>: Spotify: Allow TCP LISTEN  (in:0 out:2)
+Nov 19 20:52:18 DarkTemplar-2.local socketfilterfw[87] <Info>: Spotify: Allow TCP LISTEN  (in:0 out:2)
+Nov 19 21:01:48 DarkTemplar-2.local socketfilterfw[87] <Info>: Spotify: Allow TCP LISTEN  (in:0 out:2)
+Nov 19 21:11:48 DarkTemplar-2.local socketfilterfw[87] <Info>: Skype: Allow TCP LISTEN  (in:0 out:1)
+Nov 19 21:31:18 DarkTemplar-2.local socketfilterfw[87] <Info>: Skype: Allow TCP CONNECT (in:1 out:0)
+Nov 28 14:35:31 DarkTemplar-2.local socketfilterfw[87] <Info>: Skype: Allow TCP LISTEN  (in:0 out:1)
+Nov 28 20:35:01 DarkTemplar-2.local socketfilterfw[87] <Info>: iTunes: Allow TCP LISTEN  (in:0 out:1)
+Nov 29 22:17:30 DarkTemplar-2.local socketfilterfw[87] <Info>: Spotify: Allow TCP LISTEN  (in:0 out:1)
+Nov 29 22:18:29 --- last message repeated 1 time ---
+Nov 30 20:37:03 DarkTemplar-2.local socketfilterfw[87] <Info>: Dropbox: Allow TCP LISTEN  (in:0 out:1)
+Nov 30 20:37:03 DarkTemplar-2.local socketfilterfw[87] <Info>: Notify: Allow TCP LISTEN  (in:0 out:1)
+Nov 30 23:37:34 DarkTemplar-2.local socketfilterfw[87] <Info>: iTunes: Allow TCP LISTEN  (in:0 out:1)
+Dec  1 22:13:23 DarkTemplar-2.local socketfilterfw[87] <Info>: Dropbox: Allow TCP LISTEN  (in:0 out:1)
+Dec  1 22:13:23 DarkTemplar-2.local socketfilterfw[87] <Info>: Notify: Allow TCP LISTEN  (in:0 out:1)
+Dec 31 23:59:23 DarkTemplar-2.local socketfilterfw[87] <Info>: Notify: Allow TCP LISTEN  (in:0 out:1)
+Jan  1 01:13:23 DarkTemplar-2.local socketfilterfw[87] <Info>: Notify: Allow TCP LISTEN  (in:0 out:1)
--- a/Show More
+++ b/Show More