fix: missing modifier
This commit is contained in:
@@ -16,7 +16,7 @@ logsource:
|
||||
definition: bade5735-5ab0-4aa7-a642-a11be0e40872
|
||||
detection:
|
||||
selection:
|
||||
ScriptBlockText|contains:
|
||||
ScriptBlockText|contains|all:
|
||||
- 'Get-content '
|
||||
- 'foreach'
|
||||
- '[System.Net.Dns]::GetHostEntry'
|
||||
|
||||
Reference in New Issue
Block a user