Update win_susp_ping_hex_ip.yml

2020-09-07 09:34:18 +02:00
parent df74abc957
commit 2e6f87e2ef
1 changed files with 1 additions and 1 deletions
@@ -15,7 +15,7 @@ logsource:
    product: windows
 detection:
    selection:
-        CommandLine:
+        CommandLine|contains:
            - 'ping.exe*0x*'
            - 'ping*0x*'
    condition: selection