Update file_rename_win_ransomware.yml

2022-07-18 12:44:51 +02:00
parent 3291db17da
commit dbdb721dde
1 changed files with 2 additions and 0 deletions
@@ -17,12 +17,14 @@ detection:
            - '.pst'
            - '.docx'
            - '.jpg'
+            - '.pdf'
        TargetFilename|contains: 
            - '.lnk.'
            - '.rtf.'
            - '.pst.'
            - '.docx.'
            - '.jpg.'
+            - '.pdf'
    filter:
        TargetFilename|endswith:
            - '.tmp'