diff --git a/rules/proxy/proxy_ios_implant.yml b/rules/proxy/proxy_ios_implant.yml index f144a1c2d..7021bc8ed 100644 --- a/rules/proxy/proxy_ios_implant.yml +++ b/rules/proxy/proxy_ios_implant.yml @@ -10,7 +10,7 @@ logsource: category: proxy detection: selection: - URL: '*/list/suc?name=*' + c-uri: '*/list/suc?name=*' condition: selection fields: - ClientIP