fix: bugfix in Judgement Panda rule

2024-11-06 17:35:19 +00:00 · 2019-02-21 09:50:49 +01:00 · 2019-02-21 09:50:49 +01:00 · 3a994d0d63
commit 3a994d0d63
parent 5935eaa572
1 changed files with 1 additions and 1 deletions
--- a/rules/apt/apt_judgement_panda_gtr19.yml
+++ b/rules/apt/apt_judgement_panda_gtr19.yml
@ -57,5 +57,5 @@ detection:
            - '*copy .\1.7z \\*'
            - '*copy \\client\c$\aaaa\*'
    selection2:
-        EventID: 1
+        EventID: 4688
        NewProcessName: 'C:\Users\Public\7za.exe'