From ebc5ebe7baaa1e6d8ed9f6f7fe6cceef5cd42f34 Mon Sep 17 00:00:00 2001 From: frack113 Date: Fri, 17 Sep 2021 08:23:14 +0200 Subject: [PATCH] cleanup condition --- rules/windows/registry_event/win_outlook_registry_webview.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/rules/windows/registry_event/win_outlook_registry_webview.yml b/rules/windows/registry_event/win_outlook_registry_webview.yml index 62c4804f0..136c765f3 100644 --- a/rules/windows/registry_event/win_outlook_registry_webview.yml +++ b/rules/windows/registry_event/win_outlook_registry_webview.yml @@ -7,6 +7,7 @@ references: - https://support.microsoft.com/en-us/topic/outlook-home-page-feature-is-missing-in-folder-properties-d207edb7-aa02-46c5-b608-5d9dbed9bd04?ui=en-us&rs=en-us&ad=us author: Tobias Michalski date: 2021/06/09 +modified: 2021/09/17 tags: - attack.persistence - attack.t1112 @@ -23,7 +24,7 @@ detection: TargetObject|contains: - 'Calendar' - 'Inbox' - condition: selection1 and 1 of selection2 + condition: selection1 and selection2 fields: - Details falsepositives: