Update image_load_msdt_sdiageng.yml

2022-06-17 18:46:14 +02:00
parent 725cadc902
commit fda9c753e2
1 changed files with 1 additions and 1 deletions
@@ -13,7 +13,7 @@ detection:
  selection_img:
    Image|endswith: '\msdt.exe'
  selection_load:
-    ImageLoaded|endswith: 'sdiageng.dll'
+    ImageLoaded|endswith: '\sdiageng.dll'
  condition: all of selection*
 falsepositives:
  - Unknown