Fixed condition

AND has higher precedence than OR.
2017-05-09 23:12:02 +02:00
parent 565c51e5be
commit 300dbe8f3e
1 changed files with 1 additions and 1 deletions
@@ -20,7 +20,7 @@ detection:
        - 'MsMpEng.exe'
    keyword2:
        - 'mpengine.dll'
-    condition: selection1 or selection2 and keyword1 and keyword2
+    condition: (selection1 or selection2) and keyword1 and keyword2
 falsepositives: 
    - Unknown
 level: high