fix: wrong condition
This commit is contained in:
@@ -32,7 +32,7 @@ detection:
|
||||
CommandLine|contains|all:
|
||||
- '\FileTracker32.dll'
|
||||
- ',#1'
|
||||
condition: selection and not filter
|
||||
condition: selection and not 1 of filter*
|
||||
falsepositives:
|
||||
- False positives depend on scripts and administrative tools used in the monitored environment
|
||||
- Windows control panel elements have been identified as source (mmc)
|
||||
|
||||
Reference in New Issue
Block a user