Skip to content
This repository was archived by the owner on Nov 16, 2023. It is now read-only.

Commit 8131320

Browse files
tali-ashtali-ash
authored
Merge pull request #212 from billy-sec/patch-3
Update scheduled task creation.txt
2 parents 4d4073b + 03690bb commit 8131320

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

‎Persistence/scheduled task creation.txt‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,4 +2,4 @@
22
//Questions via Twitter: @janvonkirchheim
33
DeviceEvents
44
| where ActionType == "ScheduledTaskCreated"
5-
and InitiatingProcessAccountSid == "S-1-5-18"
5+
and InitiatingProcessAccountSid != "S-1-5-18"

0 commit comments

Comments
 (0)