From d31f8d6977e413444e2b094fdc412ff0f692e2f9 Mon Sep 17 00:00:00 2001 From: Vasiliy Burov Date: Mon, 12 Oct 2020 14:43:53 +0300 Subject: [PATCH] Update powershell_cmdline_specific_comb_methods.yml --- .../powershell/powershell_cmdline_specific_comb_methods.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/windows/powershell/powershell_cmdline_specific_comb_methods.yml b/rules/windows/powershell/powershell_cmdline_specific_comb_methods.yml index ed6751a22..311c81d07 100644 --- a/rules/windows/powershell/powershell_cmdline_specific_comb_methods.yml +++ b/rules/windows/powershell/powershell_cmdline_specific_comb_methods.yml @@ -20,7 +20,7 @@ detection: selection2: CommandLine|all: - '*char*' - - '*joint*' + - '*join*' selection3: CommandLine|contains: - 'ToInt'