Merge pull request #296 from Karneades/patch-1

Remove backslashes in CommandLine for sticky key rule

rules/windows/sysmon/sysmon_stickykey_like_backdoor.yml

@@ -39,9 +39,9 @@ detection:
         ParentImage:
             - '*\winlogon.exe'
         CommandLine:
-            - '*\cmd.exe sethc.exe *'
-            - '*\cmd.exe utilman.exe *'
-            - '*\cmd.exe osk.exe *'
-            - '*\cmd.exe Magnify.exe *'
-            - '*\cmd.exe Narrator.exe *'
-            - '*\cmd.exe DisplaySwitch.exe *'
+            - '*cmd.exe sethc.exe *'
+            - '*cmd.exe utilman.exe *'
+            - '*cmd.exe osk.exe *'
+            - '*cmd.exe Magnify.exe *'
+            - '*cmd.exe Narrator.exe *'
+            - '*cmd.exe DisplaySwitch.exe *'