Skip to content

Commit 4979186

Browse files
Merge pull request #86 from tomx4096/master
fixed typo in RecycleBin network rule
2 parents 0812e99 + abe1a00 commit 4979186

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

z-AlphaVersion.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -281,7 +281,7 @@
281281
<NetworkConnect onmatch="include">
282282
<!--Suspicious sources for network-connecting binaries-->
283283
<Image name="Usermode" condition="begin with">C:\Users</Image> <!--Tools downloaded by users can use other processes for networking, but this is a very valuable indicator.-->
284-
<Image name="Caution!" condition="begin with">C:\Recyle</Image> <!--Nothing should operate from the RecycleBin locations.-->
284+
<Image name="Caution!" condition="begin with">C:\Recycle</Image> <!--Nothing should operate from the RecycleBin locations.-->
285285
<Image condition="begin with">C:\ProgramData</Image> <!--Normally, network communications should be sourced from "Program Files" not from ProgramData, something to look at-->
286286
<Image condition="begin with">C:\Windows\Temp</Image> <!--Suspicious anything would communicate from the system-level temp directory-->
287287
<Image name="Caution!" condition="begin with">\</Image> <!--Devices and VSC shouldn't be executing changes | Credit: @SBousseaden @ionstorm @neu5ron @PerchedSystems [ https://twitter.com/SwiftOnSecurity/status/1133167323991486464 ] -->

0 commit comments

Comments
 (0)