fix: typo in systemroot

2020-07-03 10:24:58 +02:00
parent 0fa1c1525b
commit 34ea706e4f
1 changed files with 1 additions and 1 deletions
@@ -14,7 +14,7 @@ tags:
 detection:
    selection:
        CommandLine|contains:
-            - 'cmd.exe /c copy %SysteRoot%'
+            - 'cmd.exe /c copy %SystemRoot%'
            - 'cmd.exe /c copy C:\Windows'
    condition: selection
 fields: