removed slashes from strings

This commit is contained in:
C.J. May
2022-08-09 17:56:28 -05:00
committed by GitHub
parent 402882c764
commit d1b123c16a
@@ -22,17 +22,17 @@ logsource:
detection:
selection1:
TargetFilename|endswith:
- '\_BloodHound.zip'
- '\_computers.json'
- '\_containers.json'
- '\_domains.json'
- '\_gpos.json'
- '\_groups.json'
- '\_ous.json'
- '\_users.json'
- '_BloodHound.zip'
- '_computers.json'
- '_containers.json'
- '_domains.json'
- '_gpos.json'
- '_groups.json'
- '_ous.json'
- '_users.json'
selection2:
TargetFilename|contains|all:
- '\BloodHound'
- 'BloodHound'
- '.zip'
condition: 1 of selection*
falsepositives: