From 7bd2e2911cd020b2248c4acff0f4b4a7d7fed769 Mon Sep 17 00:00:00 2001
From: Samirbous <64742097+Samirbous@users.noreply.github.com>
Date: Wed, 18 Mar 2026 12:38:29 +0000
Subject: [PATCH] Update command_and_control_common_webservices.toml (#5831)

Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com>
---
 rules/windows/command_and_control_common_webservices.toml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/rules/windows/command_and_control_common_webservices.toml b/rules/windows/command_and_control_common_webservices.toml
index edebbb041..0c00e93c8 100644
--- a/rules/windows/command_and_control_common_webservices.toml
+++ b/rules/windows/command_and_control_common_webservices.toml
@@ -2,7 +2,7 @@
 creation_date = "2020/11/04"
 integration = ["endpoint", "sentinel_one_cloud_funnel"]
 maturity = "production"
-updated_date = "2026/02/09"
+updated_date = "2026/03/12"
 
 [transform]
 [[transform.investigate]]
@@ -231,8 +231,7 @@ network where host.os.type == "windows" and
         "webhook.site",
         "run.mocky.io",
         "mockbin.org", 
-        "www.googleapis.com", 
-        "googleapis.com",
+        "*googleapis.com", 
         "global.rel.tunnels.api.visualstudio.com",
         "*.devtunnels.ms",
         "api.github.com",