Update win_apt_dragonfly.yml

2020-10-15 17:27:42 -03:00
parent 5eac9e5161
commit d074ea110f
1 changed files with 2 additions and 2 deletions
@@ -13,8 +13,8 @@ logsource:
    product: windows
 detection:
    selection:
-        Image:
-            - '*\crackmapexec.exe'
+        Image|endswith:
+            - '\crackmapexec.exe'
    condition: selection
 falsepositives:
    - None