Fix rule using list with only 1 element

2023-01-13 17:36:38 +01:00
parent c798375a56
commit f58358b037
1 changed files with 1 additions and 2 deletions
@@ -19,8 +19,7 @@ logsource:
    category: antivirus
 detection:
    selection:
-        Signature|startswith:
-            - 'PWS'
+        Signature|startswith: 'PWS'
        Signature|contains:
            - 'DumpCreds'
            - 'Mimikatz'