fix: typo in modified
This commit is contained in:
@@ -15,7 +15,7 @@ logsource:
|
||||
detection:
|
||||
selection:
|
||||
TargetObject|contains: 'Microsoft\Windows NT\CurrentVersion\SilentProcessExit'
|
||||
Details|contain: 'MonitorProcess'
|
||||
Details|contains: 'MonitorProcess'
|
||||
EventType:
|
||||
- SetValue
|
||||
- CreateValue
|
||||
|
||||
Reference in New Issue
Block a user