From d6b64f2caf1eb4fa1e563ddad1794b53cf1fbc72 Mon Sep 17 00:00:00 2001 From: yugoslavskiy Date: Sat, 17 Oct 2020 22:22:20 +0200 Subject: [PATCH] Update lnx_schedule_task_job_cron.yml to trigger a test --- rules/linux/lnx_schedule_task_job_cron.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/linux/lnx_schedule_task_job_cron.yml b/rules/linux/lnx_schedule_task_job_cron.yml index dc37f2270..3c0acd950 100644 --- a/rules/linux/lnx_schedule_task_job_cron.yml +++ b/rules/linux/lnx_schedule_task_job_cron.yml @@ -12,7 +12,7 @@ logsource: detection: selection: ProcessName|endswith: - - 'crontab' + - '/crontab' CommandLine|contains: - '/tmp/' condition: selection