Merge pull request #879 from Neo23x0/rule-devel

fix: missing copy command
2020-07-03 10:18:21 +02:00
parent 248506be93 0fa1c1525b
commit 53620a0d2f
1 changed files with 2 additions and 2 deletions
@@ -14,8 +14,8 @@ tags:
 detection:
    selection:
        CommandLine|contains:
-            - 'cmd.exe /c %SysteRoot%'
-            - 'cmd.exe /c C:\Windows'
+            - 'cmd.exe /c copy %SysteRoot%'
+            - 'cmd.exe /c copy C:\Windows'
    condition: selection
 fields:
    - CommandLine