From bde2b95cdc19b986a6e100d3e3693824a58b0614 Mon Sep 17 00:00:00 2001
From: Jonhnathan <jonhnathancesar@gmail.com>
Date: Fri, 27 Nov 2020 12:14:34 -0300
Subject: [PATCH] Remove Additional backslash

---
 rules/windows/process_creation/win_control_panel_item.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rules/windows/process_creation/win_control_panel_item.yml b/rules/windows/process_creation/win_control_panel_item.yml
index 02f827c26..8045adc4c 100644
--- a/rules/windows/process_creation/win_control_panel_item.yml
+++ b/rules/windows/process_creation/win_control_panel_item.yml
@@ -24,7 +24,7 @@ detection:
         CommandLine|endswith: '.cpl'
     filter:
         CommandLine|contains:
-            - '\System32\\'
+            - '\System32\'
             - '%System%'
     selection2:
         CommandLine|contains: