valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-07 17:58:52 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update powershell_cmdline_reversed_strings.yml

Browse Source
This commit is contained in:
Vasiliy Burov 2020-10-11 17:37:07 +03:00 committed by GitHub
parent 7aaf4654cd
commit c868ef655c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rules/windows/powershell/powershell_cmdline_reversed_strings.yml
View File

@ -15,7 +15,7 @@ logsource:
product: windows
detection:
selection:
CommandLine|Contains:
CommandLine|contains:
- 'hctac'
- 'kearb'
- 'dnammoc'