diff --git a/rules/windows/powershell/powershell_alternate_powershell_hosts.yml b/rules/windows/powershell/powershell_alternate_powershell_hosts.yml index 0feb2c68b..37f108274 100644 --- a/rules/windows/powershell/powershell_alternate_powershell_hosts.yml +++ b/rules/windows/powershell/powershell_alternate_powershell_hosts.yml @@ -28,4 +28,5 @@ detection: falsepositives: - Programs using PowerShell directly without invocation of a dedicated interpreter - MSP Detection Searcher + - Citrix ConfigSync.ps1 level: medium