Update registry_set_mpnotify_persistence.yml

2022-07-21 21:25:14 +01:00
parent f1673d13a6
commit 4fa86ca772
1 changed files with 1 additions and 1 deletions
@@ -11,7 +11,7 @@ logsource:
    category: registry_set
    product: windows
 detection:
-    selection_root:
+    selection:
        EventType: SetValue
        TargetObject|contains: '\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\mpnotify'
    condition: selection