Update win_susp_mshta_execution.yml
This commit is contained in:
@@ -28,7 +28,7 @@ detection:
|
||||
- '.jpg'
|
||||
- '.png'
|
||||
- '.lnk'
|
||||
# - '*.chm*' # could be prone to false positives
|
||||
# - '.chm' # could be prone to false positives
|
||||
- '.xls'
|
||||
- '.doc'
|
||||
- '.zip'
|
||||
|
||||
Reference in New Issue
Block a user