fix: selection name and add old path

2022-12-20 10:42:21 +01:00
parent de5345cfd2
commit 3f48eb4963
1 changed files with 4 additions and 2 deletions
@@ -18,8 +18,10 @@ detection:
        - Image|endswith:
            - '\sqlite.exe'
            - '\sqlite3.exe'
-    selection_firefox:
-        CommandLine|contains: '\Google\Chrome\User Data\Default\Network\Cookies'
+    selection_chrome:
+        CommandLine|contains:
+            - '\Google\Chrome\User Data\Default\Network\Cookies' # Latest chrome versions
+            - '\Google\Chrome\User Data\Default\Cookies' # Older chrome versions
    condition: all of selection_*
 falsepositives:
    - Unknown