Update proc_creation_win_ntfs_short_name_use_image.yml

2022-08-10 15:25:10 +01:00
parent 14277c5b6d
commit babdecc642
1 changed files with 1 additions and 1 deletions
@@ -38,7 +38,7 @@ detection:
            - '~2.hta'
    filter:
        ParentImage|endswith: '\WebEx\WebexHost.exe'
-    condition: selection
+    condition: selection and not filter
 falsepositives:
    - Unknown
 level: high