Update win_netsh_wifi_credential_harvesting.yml

rules/windows/process_creation/win_netsh_wifi_credential_harvesting.yml

@@ -4,7 +4,7 @@ status: experimental
 description: Detect the harvesting of wifi credentials using netsh.exe
 references:
     - https://blog.malwarebytes.com/threat-analysis/2020/04/new-agenttesla-variant-steals-wifi-credentials/
-author: Andreas Hunkeler (@Karneades)
+author: Andreas Hunkeler (@Karneades), oscd.community
 date: 2020/04/20
 modified: 2020/09/01
 tags:
@@ -16,8 +16,13 @@ logsource:
     product: windows
 detection:
     selection:
-        CommandLine:
-            - 'netsh wlan s* p* k*=clear'
+        CommandLine|contains|all:
+            - 'netsh'
+            - 'wlan'
+            - ' s'
+            - ' p'
+            - ' k'
+            - '=clear'
     condition: selection
 falsepositives:
     - Legitimate administrator or user uses netsh.exe wlan functionality for legitimate reason