Update rules/windows/process_creation/proc_creation_win_susp_process_hacker.yml

Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>
2022-11-19 08:45:58 +01:00
parent 009ef39ca0
commit 4e36ec7175
1 changed files with 1 additions and 0 deletions
@@ -22,6 +22,7 @@ detection:
        - OriginalFileName:
            - 'ProcessHacker.exe'
            - 'Process Hacker'
+            - 'SystemInformer.exe'
        - Description: 
            - 'Process Hacker'
            - 'System Informer'