Fixing failed CI build

2019-03-04 16:44:30 +03:00
parent 45458121c6
commit c8be6e649b
1 changed files with 3 additions and 3 deletions
@@ -10,16 +10,16 @@ tags:
    - attack.t1172
 detection:
    timeframe: 5m
-    condition: service | near process
+    condition: service_install | near process
 falsepositives:
    - Unknown
 level: high
 ---
 logsource:
-    service: system
    product: windows
+    service: system
 detection:
-    service:
+    service_install:
        EventID: 7045
        ServiceName: 'Google Update'
 ---