2 Commits

Author	SHA1	Message	Date
Tim Shelton	384862b906	When command begins with C:\Windows\System32\cmd.exe it will always match susp_del_exe # ex - C:\Windows\System32\cmd.exe" /c del /f /q "C:\Program Files (x86)\Software Package\Client\tmpDir\"	2021-12-02 15:13:23 +00:00
frack113	79399db2b8	add process_creation_susp_del	2021-10-26 13:17:56 +02:00