valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-07 17:58:52 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fixed rule: added condition

Browse Source
This commit is contained in:
Thomas Patzke 2020-01-07 15:20:16 +01:00
parent 48f5f480fd
commit b34bf98c61
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rules/windows/sysmon/sysmon_hack_wce.yml
View File

@ -34,4 +34,4 @@ detection:
selection:
EventID: 13
TargetObject|contains: Services\WCESERVICE\Start
condition: selection