Skip to content

Commit abe1a00

Browse files
committed
fixed typo in RecycleBin network rule
1 parent ae1444a commit abe1a00

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

z-AlphaVersion.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -316,7 +316,7 @@
316316
<NetworkConnect onmatch="include">
317317
<!--Suspicious sources for network-connecting binaries-->
318318
<Image name="Usermode" condition="begin with">C:\Users</Image> <!--Tools downloaded by users can use other processes for networking, but this is a very valuable indicator.-->
319-
<Image name="Caution!" condition="begin with">C:\Recyle</Image> <!--Nothing should operate from the RecycleBin locations.-->
319+
<Image name="Caution!" condition="begin with">C:\Recycle</Image> <!--Nothing should operate from the RecycleBin locations.-->
320320
<Image condition="begin with">C:\ProgramData</Image> <!--Normally, network communications should be sourced from "Program Files" not from ProgramData, something to look at-->
321321
<Image condition="begin with">C:\Windows\Temp</Image> <!--Suspicious anything would communicate from the system-level temp directory-->
322322
<Image name="Caution!" condition="begin with">\</Image> <!--Devices and VSC shouldn't be executing changes | Credit: @SBousseaden @ionstorm @neu5ron @PerchedSystems [ https://twitter.com/SwiftOnSecurity/status/1133167323991486464 ] -->

0 commit comments

Comments
 (0)