security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix space

Browse Source
This commit is contained in:
frack113
2021-12-12 12:25:05 +01:00
parent 221f479825
commit 97580d4fa1
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/powershell/powershell_script/powershell_ps_suspicious_local_group_reco.yml
+1 -1
View File
@@ -21,7 +21,7 @@ detection:
ScriptBlockText|contains|all:
- 'Get-WMIObject'
- 'Win32_Group'
condition: 1 of test_*
condition: 1 of test_*
falsepositives:
- unknown
level: low