Revert "refactor: exclude case in which upper ticks are used"
This reverts commit f00aaf8461.
This commit is contained in:
@@ -20,9 +20,7 @@ detection:
|
||||
- '\powerpnt.exe'
|
||||
- '\excel.exe'
|
||||
filter:
|
||||
CommandLine|endswith:
|
||||
- '\control.exe input.dll'
|
||||
- '\control.exe" input.dll'
|
||||
CommandLine|endswith: '\control.exe input.dll'
|
||||
condition: selection and not filter
|
||||
falsepositives:
|
||||
- Unknown
|
||||
|
||||
Reference in New Issue
Block a user