Skip to content

Suggested Enhancement for Detection: Ping Sleep Batch Command #4211

Description

@ProfessorBrausewein

The current detection is using Processes.parent_process = "*-n*", but does not detect the usage of Processes.parent_process = "*/n*"

Detection enhancement by filtering for both slash and hyphen notation to detect alternative spellings. Or is there a special reason why hyphen notation is not taken into account?

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions