From ebb4580378bcb615aa3f74f13625a4693ca99c9e Mon Sep 17 00:00:00 2001
From: Jonhnathan <jonhnathancesar@gmail.com>
Date: Fri, 20 Nov 2020 02:04:28 -0300
Subject: [PATCH] Remove additional backlash

---
 rules/windows/sysmon/sysmon_cactustorch.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rules/windows/sysmon/sysmon_cactustorch.yml b/rules/windows/sysmon/sysmon_cactustorch.yml
index 087ba323a..45ab4e3a0 100644
--- a/rules/windows/sysmon/sysmon_cactustorch.yml
+++ b/rules/windows/sysmon/sysmon_cactustorch.yml
@@ -20,7 +20,7 @@ detection:
             - '\System32\mshta.exe'
             - '\winword.exe'
             - '\excel.exe'
-        TargetImage|contains: '\SysWOW64\\'
+        TargetImage|contains: '\SysWOW64\'
         StartModule: null
     condition: selection
 tags: