Update win_mavinject_proc_inj.yml

2020-10-15 18:06:51 -03:00
parent 3e7c770ef9
commit 247a85e04a
1 changed files with 1 additions and 1 deletions
@@ -18,7 +18,7 @@ logsource:
    product: windows
 detection:
    selection:
-        CommandLine: '* /INJECTRUNNING *'
+        CommandLine|contains: ' /INJECTRUNNING '
    condition: selection
 falsepositives:
    - unknown