Add 'Add-Content' to powershell_ntfs_ads_access

2020-05-13 11:57:10 +02:00
parent 37c33cb6d9
commit 1a598282f4
1 changed files with 1 additions and 0 deletions
@@ -16,6 +16,7 @@ logsource:
 detection:
    keyword1:
        - "set-content"
+        - "add-content"
    keyword2:
        - "-stream"
    condition: keyword1 and keyword2