Update file_rename_win_ransomware.yml

This commit is contained in:
Florian Roth
2022-07-18 12:43:54 +02:00
committed by GitHub
parent 5bfd9b78f1
commit 3291db17da
@@ -16,11 +16,13 @@ detection:
- '.rtf'
- '.pst'
- '.docx'
- '.jpg'
TargetFilename|contains:
- '.lnk.'
- '.rtf.'
- '.pst.'
- '.docx.'
- '.jpg.'
filter:
TargetFilename|endswith:
- '.tmp'