security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Merge pull request #782 from ZikyHD/patch-1

Browse Source 
Remove duplicate 'CommandLine' in fields
This commit is contained in:
Florian Roth
2020-05-20 12:55:41 +02:00
committed by GitHub
parent af92a5bd2c 8963c0a65e
commit e7980bb434
1 changed files with 0 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/process_creation/win_task_folder_evasion.yml
-1
View File
@@ -30,7 +30,6 @@ detection:
fields:
- CommandLine
- ParentProcess
- CommandLine
falsepositives:
- Unknown
level: high