Remove another reference to hardcoded event ID
This commit is contained in:
@@ -31,6 +31,5 @@ logsource:
|
||||
category: file_event
|
||||
detection:
|
||||
selection2:
|
||||
EventID: 11
|
||||
TargetFilename|contains:
|
||||
- 'ds7002.lnk'
|
||||
|
||||
Reference in New Issue
Block a user