Merge pull request #2643 from elhoim/patch-1

Avoiding being too narrow for paths
2022-02-05 12:03:46 +01:00
parent ef629c1502 affd73506d
commit ebd09793d7
1 changed files with 2 additions and 1 deletions
@@ -7,13 +7,14 @@ references:
    - https://securelist.com/moonbounce-the-dark-side-of-uefi-firmware/105468/
    - https://docs.microsoft.com/en-us/dotnet/framework/tools/installutil-exe-installer-tool
 date: 2022/01/23
+modified: 2022/02/04
 logsource:
    category: process_creation
    product: windows
 detection:
    selection:
        Image|endswith: \InstallUtil.exe
-        Image|contains: Microsoft.NET\Framework64\
+        Image|contains: Microsoft.NET\Framework
        CommandLine|contains|all:
            - '/logfile= '
            - '/LogToConsole=false'