fix: single list item to value

2021-10-27 11:16:12 +02:00
parent 3983baf2b0
commit eb4ef6bcfc
1 changed files with 1 additions and 2 deletions
@@ -15,8 +15,7 @@ logsource:
    product: windows
 detection:
    selection1:
-        Image|contains:
-            - '\Windows\'
+        Image|contains: '\Windows\'
        CommandLine|contains:
            - '\..\Windows\'
            - '\..\System32\'