fix list

2022-07-12 19:44:41 +02:00
parent c0b580169d
commit 0fbbbd19dc
1 changed files with 1 additions and 2 deletions
@@ -17,8 +17,7 @@ logsource:
 detection:
    selection:
        EventID: 6 
-        Data|contains:
-            - 'Install-TransportAgent'
+        Data|contains: 'Install-TransportAgent'
    condition: selection
 fields:
    - AssemblyPath