Update proc_creation_win_dnscmd_discovery.yml

Modified selection name
2022-07-31 18:54:34 -04:00
parent 7155eb999b
commit 78ca0d324c
1 changed files with 1 additions and 1 deletions
@@ -21,7 +21,7 @@ logsource:
 detection:
    selection_dsamain:
        Image|endswith: '\dnscmd.exe'
-    selection_recon1:
+    selection_1:
        CommandLine|contains:
            - '/enumrecords'
            - '/enumzones'