Update av_exploiting.yml

Not sure if the '' affects.
2024-11-07 09:48:58 +00:00 · 2019-11-06 16:16:49 +08:00 · 2019-11-06 16:16:49 +08:00 · cfe7ddbe5b
commit cfe7ddbe5b
parent 36fe748c2e
1 changed files with 1 additions and 1 deletions
--- a/rules/windows/malware/av_exploiting.yml
+++ b/rules/windows/malware/av_exploiting.yml
@ -23,7 +23,7 @@ detection:
            - "*CobaltSrike*"
            - "*Swrort*"
            - "*Rozena*"
-            - '*Backdoor.Cobalt*'
+            - "*Backdoor.Cobalt*"
    condition: selection
 fields:
    - FileName