From d0a796439bb26b15503d18af7554e2d4ab72182b Mon Sep 17 00:00:00 2001 From: nsaddler Date: Wed, 28 Oct 2020 19:25:43 +0300 Subject: [PATCH] Update powershell_CL_Invocation_LOLScript.yml --- .../windows/powershell/powershell_CL_Invocation_LOLScript.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/windows/powershell/powershell_CL_Invocation_LOLScript.yml b/rules/windows/powershell/powershell_CL_Invocation_LOLScript.yml index 6fc70a361..9c4f4342f 100644 --- a/rules/windows/powershell/powershell_CL_Invocation_LOLScript.yml +++ b/rules/windows/powershell/powershell_CL_Invocation_LOLScript.yml @@ -19,6 +19,6 @@ detection: ScriptBlockText|contains|all: - 'CL_Invocation.ps1' - 'SyncInvoke' - condition: selection + condition: selection falsepositives: Unknown -level: high \ No newline at end of file +level: high