fix pass

2022-09-16 20:04:55 +02:00
parent c78b332ba7
commit 2cd376c70c
1 changed files with 3 additions and 2 deletions
@@ -23,8 +23,9 @@ detection:
        ScriptBlockText|contains: '-recurse'
    selection_file:
        ScriptBlockText|contains:
-            - 'pass'
-            - 'kdbx'
+            - '.pass'
+            - '.kdbx'
+            - '.kdb'
    condition: all of selection_*
 falsepositives:
    - Unknown