Remove additional backslash

2020-11-19 23:15:38 -03:00
parent 351a9920ed
commit 0ffd1ef47f
1 changed files with 1 additions and 1 deletions
@@ -16,7 +16,7 @@ logsource:
 detection:
    selection:
        EventID: 13
-        TargetObject|contains: '\Software\AppDataLow\Software\Microsoft\\'
+        TargetObject|contains: '\Software\AppDataLow\Software\Microsoft\'
    condition: selection
 falsepositives:
    - Unknown