fix: single list item issue

This commit is contained in:
Florian Roth 2021-09-01 14:03:42 +02:00
parent 505140d273
commit 1aac21ba79
No known key found for this signature in database
GPG Key ID: 5C328E4878049D7A

View File

@ -15,7 +15,7 @@ logsource:
category: wmi_event
detection:
selection_destination:
- Destination|base64offset|contains:
Destination|base64offset|contains:
- 'WriteProcessMemory'
- 'This program cannot be run in DOS mode'
- 'This program must be run under Win32'