Skip to content

Commit 00c3470

Browse files
committed
Fixed list
1 parent d6cb0af commit 00c3470

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

rules/windows/process_creation/proc_creation_win_sc_sdset_allow_service_changes.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ detection:
3434
- ';SY' # Local system
3535
- ';WD' # Everyone
3636
filter_optional_hexnode:
37-
- ParentImage|endswith: 'C:\Hexnode\Hexnode Agent\Current\HexnodeAgent.exe'
37+
ParentImage|endswith: 'C:\Hexnode\Hexnode Agent\Current\HexnodeAgent.exe'
3838
condition: all of selection_* and not 1 of filter_optional_*
3939
falsepositives:
4040
- Unknown

0 commit comments

Comments
 (0)