Skip to content

Commit f6c5c4f

Browse files
Merge PR #5694 from @swachchhanda000 - fix: remove + characters from selectors
fix: Arbitrary DLL or Csproj Code Execution Via Dotnet.EXE - remove + characters from selectors
1 parent b4c6fac commit f6c5c4f

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

rules/windows/process_creation/proc_creation_win_dotnet_arbitrary_dll_csproj_execution.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ detection:
2727
- '.dll"'
2828
- ".csproj'"
2929
- ".dll'"
30-
filter_optional_notepad++:
30+
filter_optional_notepadplus_plus:
3131
ParentImage:
3232
- 'C:\Program Files (x86)\Notepad++\notepad++.exe'
3333
- 'C:\Program Files\Notepad++\notepad++.exe'

0 commit comments

Comments
 (0)