Update silenttrinity_stager_msbuild_activity.yml

2020-10-26 14:13:33 +05:30
parent 630365cb4b
commit 708fe7f8fa
1 changed files with 1 additions and 1 deletions
@@ -19,7 +19,7 @@ detection:
            - '443'
        Initiated: 'true'
    filter:
-        ParentImage|endswith: '*\msbuild.exe'
+        ParentImage|endswith: '\msbuild.exe'
    condition: selection and  filter 
 falsepositives:
    - unknown