Update file_rename_win_ransomware.yml
This commit is contained in:
@@ -16,11 +16,13 @@ detection:
|
||||
- '.rtf'
|
||||
- '.pst'
|
||||
- '.docx'
|
||||
- '.jpg'
|
||||
TargetFilename|contains:
|
||||
- '.lnk.'
|
||||
- '.rtf.'
|
||||
- '.pst.'
|
||||
- '.docx.'
|
||||
- '.jpg.'
|
||||
filter:
|
||||
TargetFilename|endswith:
|
||||
- '.tmp'
|
||||
|
||||
Reference in New Issue
Block a user