removed slashes from strings
This commit is contained in:
@@ -22,17 +22,17 @@ logsource:
|
||||
detection:
|
||||
selection1:
|
||||
TargetFilename|endswith:
|
||||
- '\_BloodHound.zip'
|
||||
- '\_computers.json'
|
||||
- '\_containers.json'
|
||||
- '\_domains.json'
|
||||
- '\_gpos.json'
|
||||
- '\_groups.json'
|
||||
- '\_ous.json'
|
||||
- '\_users.json'
|
||||
- '_BloodHound.zip'
|
||||
- '_computers.json'
|
||||
- '_containers.json'
|
||||
- '_domains.json'
|
||||
- '_gpos.json'
|
||||
- '_groups.json'
|
||||
- '_ous.json'
|
||||
- '_users.json'
|
||||
selection2:
|
||||
TargetFilename|contains|all:
|
||||
- '\BloodHound'
|
||||
- 'BloodHound'
|
||||
- '.zip'
|
||||
condition: 1 of selection*
|
||||
falsepositives:
|
||||
|
||||
Reference in New Issue
Block a user