Update win_mal_wceaux_dll.yml

2020-10-15 15:41:13 -03:00
parent 9bfd63ec26
commit 8f3542a73e
1 changed files with 1 additions and 1 deletions
@@ -21,7 +21,7 @@ detection:
            - 4658
            - 4660
            - 4663
-        ObjectName: '*\wceaux.dll'
+        ObjectName|endswith: '\wceaux.dll'
    condition: selection
 falsepositives:
    - Penetration testing