Skip to content

Commit a4a52bf

Browse files
Apply suggestions from code review
1 parent e9a4e10 commit a4a52bf

1 file changed

Lines changed: 1 addition & 4 deletions

File tree

rules/windows/image_load/image_load_side_load_from_non_system_location.yml

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -479,10 +479,7 @@ detection:
479479
ImageLoaded|startswith: 'C:\Program Files\WindowsApps\Microsoft.DirectXRuntime_'
480480
ImageLoaded|endswith: '\d3dx9_43.dll'
481481
filter_main_systemsettings:
482-
ImageLoaded|startswith:
483-
- 'C:\Windows\ImmersiveControlPanel\'
484-
- 'C:\Windows\WinSxS\'
485-
ImageLoaded|endswith: '\systemsettings.dll'
482+
ImageLoaded: 'C:\Windows\ImmersiveControlPanel\SystemSettings.dll'
486483
filter_optional_exchange:
487484
ImageLoaded|startswith: 'C:\Program Files\Microsoft\Exchange Server\'
488485
ImageLoaded|endswith: '\mswb7.dll'

0 commit comments

Comments
 (0)