Update win_file_winword_cve_2021_40444.yml

change TargetFilename|contains|all
2021-09-13 16:05:56 +07:00
parent 5977596e65
commit edd5c2745e
1 changed files with 1 additions and 1 deletions
@@ -17,7 +17,7 @@ detection:
        TargetFilename|contains: '\Windows\INetCache'
    selection_inf:
        Image: '\winword.exe'
-        TargetFilename|contains|all: 
+        TargetFilename|contains|all:
        - '\AppData\Local\Temp\'
        - '.inf'
    condition: selection or selection_inf