Avoiding being too narrow for paths

InstallUtil.exe is also available under 32 bits path for .net framework
2022-02-04 21:08:47 +01:00
parent aa2baf5f3a
commit 391d73a2c2
1 changed files with 2 additions and 2 deletions
@@ -6,14 +6,14 @@ author: frack113
 references:
    - https://securelist.com/moonbounce-the-dark-side-of-uefi-firmware/105468/
    - https://docs.microsoft.com/en-us/dotnet/framework/tools/installutil-exe-installer-tool
-date: 2022/01/23
+date: 2022/02/04
 logsource:
    category: process_creation
    product: windows
 detection:
    selection:
        Image|endswith: \InstallUtil.exe
-        Image|contains: Microsoft.NET\Framework64\
+        Image|contains: Microsoft.NET\Framework
        CommandLine|contains|all:
            - '/logfile= '
            - '/LogToConsole=false'