valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-07 17:58:52 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix typo of fields

Browse Source
This commit is contained in:
frack113 2021-05-24 10:34:56 +02:00
parent a1bddf51e7
commit 1fcd0bf951
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
rules/windows/process_creation/win_regini.yml
View File

@ -11,6 +11,7 @@ tags:
- attack.defense_evasion - attack.defense_evasion
author: Eli Salem, Sander Wiebing, oscd.community author: Eli Salem, Sander Wiebing, oscd.community
date: 2020/10/08 date: 2020/10/08
modified: 2021/05/24
logsource: logsource:
category: process_creation category: process_creation
product: windows product: windows
@ -20,7 +21,7 @@ detection:
filter: filter:
CommandLine|re: ':[^ \\]' # to avoid intersection with ADS rule CommandLine|re: ':[^ \\]' # to avoid intersection with ADS rule
condition: selection and not filter condition: selection and not filter
fieds: fields:
- ParentImage - ParentImage
- CommandLine - CommandLine
falsepositives: falsepositives: