fix: default to (Default)

2021-09-16 11:39:45 +02:00
parent 6e981f56df
commit a926439b39
1 changed files with 1 additions and 1 deletions
@@ -19,7 +19,7 @@ detection:
        TargetObject|startswith: 
            - 'HKCR\CLSID\'
            - 'HKCU\Software\Classes\CLSID\'
-        TargetObject|endswith: \InprocServer32\default
+        TargetObject|endswith: '\InprocServer32\(Default)'
    filter1:
        Details|contains: # Exclude privileged directories and observed FPs
            - '%%systemroot%%\system32\'