fixing more yaml lint complaints

2022-02-10 00:00:03 +00:00
parent a72f843081
commit bc40160444
1 changed files with 4 additions and 3 deletions
@@ -16,9 +16,10 @@ detection:
      - '\takeown.exe'
      - '\cacls.exe'
      - '\icacls.exe'
-    CommandLine|contains: '/grant'
-    Image|endswith: '\attrib.exe'
-    CommandLine|contains: '-r'
+      - '\attrib.exe'
+    CommandLine|contains: 
+      - '/grant'
+      - '-r'
  filter:
    CommandLine: 
      - 'C:\Windows\system32\cmd.exe /C ICACLS C:\ProgramData\dynatrace\gateway\config\connectivity.history /reset'