Removal of NODE from ALL filter for better coverage

2021-06-15 17:07:51 +05:00
parent 82bcfb29c3
commit 1114a25a2c
1 changed files with 0 additions and 1 deletions
@@ -17,7 +17,6 @@ detection:
        Image|endswith: '\wmic.exe'
    selection2:
        CommandLine|contains|all:
-            - '/NODE:'
            - 'process'
            - 'call'
            - 'create '