fix typo of fields

This commit is contained in:
frack113 2021-05-24 10:37:14 +02:00
parent 1fcd0bf951
commit afb3d63900

View File

@ -11,6 +11,7 @@ tags:
- attack.defense_evasion
author: Eli Salem, Sander Wiebing, oscd.community
date: 2020/10/12
modified: 2021/05/24
logsource:
category: process_creation
product: windows
@ -19,7 +20,7 @@ detection:
Image|endswith: '\regini.exe'
CommandLine|re: ':[^ \\]'
condition: selection
fieds:
fields:
- ParentImage
- CommandLine
falsepositives: