Fix ProcessCommandLine field

2021-03-15 11:56:19 +01:00
parent 310888bae7
commit e4f24f4e1f
1 changed files with 2 additions and 2 deletions
@@ -16,7 +16,7 @@ logsource:
    service: process_creation
 detection:
    selection:
-        ProcessCommandline|contains|all: 
+        ProcessCommandLine|contains|all: 
            - '/UpdateDeploymentProvider'
            - '/RunHandlerComServer'
        Image|endswith: 
@@ -24,4 +24,4 @@ detection:
    condition: selection
 falsepositives:
    - Unknown
-level: high
+level: high