Escape ? character

2022-08-12 12:46:21 +02:00
parent 5c549a2825
commit 2bcb6abd72
1 changed files with 2 additions and 2 deletions
@@ -10,11 +10,11 @@ logsource:
    category: proxy
 detection:
    selection:
-        c-uri|contains: 'momyshark?key='
+        c-uri|contains: 'momyshark\?key='
    condition: selection
 falsepositives:
    - Unknown
 level: critical
 tags:
    - attack.command_and_control
-    - attack.t1071.001
+    - attack.t1071.001