diff --git a/rules/windows/powershell/powershell_CL_Invocation_LOLScript.yml b/rules/windows/powershell/powershell_CL_Invocation_LOLScript.yml index 6fc70a361..9c4f4342f 100644 --- a/rules/windows/powershell/powershell_CL_Invocation_LOLScript.yml +++ b/rules/windows/powershell/powershell_CL_Invocation_LOLScript.yml @@ -19,6 +19,6 @@ detection: ScriptBlockText|contains|all: - 'CL_Invocation.ps1' - 'SyncInvoke' - condition: selection + condition: selection falsepositives: Unknown -level: high \ No newline at end of file +level: high