diff --git a/rules/windows/powershell/powershell_cmdline_specific_comb_methods.yml b/rules/windows/powershell/powershell_cmdline_specific_comb_methods.yml index ed6751a22..311c81d07 100644 --- a/rules/windows/powershell/powershell_cmdline_specific_comb_methods.yml +++ b/rules/windows/powershell/powershell_cmdline_specific_comb_methods.yml @@ -20,7 +20,7 @@ detection: selection2: CommandLine|all: - '*char*' - - '*joint*' + - '*join*' selection3: CommandLine|contains: - 'ToInt'