Remove additional backslash

2020-11-19 23:08:40 -03:00
parent 9a5b17f2bb
commit 44652c4ffd
1 changed files with 1 additions and 1 deletions
@@ -22,7 +22,7 @@ detection:
            - '\excel.exe'
            - '\outlook.exe'
        ImageLoaded|startswith:
-            - 'C:\Windows\assembly\\'
+            - 'C:\Windows\assembly\'
    condition: selection
 falsepositives:
    - Alerts on legitimate macro usage as well, will need to filter as appropriate