fix: buggy rule

2020-05-23 18:32:02 +02:00
parent df715386b6
commit 3028a27055
1 changed files with 2 additions and 2 deletions
@@ -16,8 +16,8 @@ logsource:
    category: process_creation
    product: windows
 detection:
-    selection1:
-        CommandLine|contains:
+    selection:
+        CommandLine|contains|all:
            - ' /vss '
            - ' /y '
    condition: selection