security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: error in selection

Browse Source
This commit is contained in:
Nasreddine Bencherchali
2022-12-12 22:16:38 +01:00
committed by GitHub
parent 622fb687b7
commit 14a2bf3b59
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/process_creation/proc_creation_susp_rcedit_execution.yml
+1 -2
View File
@@ -25,8 +25,7 @@ detection:
- Description: 'Edit resources of exe'
- Product: 'rcedit'
selection_flags:
CommandLine|contains:
- '--set-' # Covers multiple edit commands such as "--set-resource-string" or "--set-version-string"
CommandLine|contains: '--set-' # Covers multiple edit commands such as "--set-resource-string" or "--set-version-string"
selection_attributes:
CommandLine|contains:
- 'OriginalFileName'