Fix startswith

2022-08-12 12:07:03 +02:00
parent 29dbe65d92
commit 472da1d8ef
1 changed files with 2 additions and 2 deletions
@@ -13,9 +13,9 @@ logsource:
    product: windows
 detection:
    selection:
-        PreviousCreationUtcTime|startwith: 2022
+        PreviousCreationUtcTime|startswith: 2022
    filter:
-        CreationUtcTime|startwith: 2022
+        CreationUtcTime|startswith: 2022
    condition: selection and not filter
 falsepositives:
    - NTP change