Update and rename win_script_event_consumer_spawn to win_script_event_consumer_spawn.yml

2021-06-22 16:35:46 +07:00
parent cbe97206de
commit d9a749eec0
1 changed files with 1 additions and 0 deletions
@@ -28,6 +28,7 @@ detection:
            - '\mshta.exe'
            - '\rundll32.exe'
            - '\msiexec.exe'
+            - '\msbuild.exe'
    condition: selection
 fields:
    - CommandLine