Update file_event_win_powershell_startup_shortcuts.yml
This commit is contained in:
@@ -24,5 +24,5 @@ detection:
|
||||
condition: selection
|
||||
falsepositives:
|
||||
- Unknown
|
||||
- Depending on your environment accepted applications may leverage this at times. It is recomended to search for recommended inidicative of malware.
|
||||
- Depending on your environment accepted applications may leverage this at times. It is recommended to search for anomalies inidicative of malware.
|
||||
level: high
|
||||
|
||||
Reference in New Issue
Block a user