Merge branch 'rule-devel' of https://github.com/SigmaHQ/sigma into rule-devel

2021-08-24 12:30:42 +02:00
parent 3cdb88ad55 272625a005
commit 6ca30619ac
1 changed files with 1 additions and 1 deletions
@@ -13,7 +13,7 @@ detection:
    selection:
        Image|endswith: '\splwow64.exe'
    filter:
-        CommandLine|contains: 'splwow64.exe '
+        CommandLine|endswith: 'splwow64.exe'
    condition: selection and not filter
 falsepositives:
    - Unknown