Skip to content

Commit 1eb8731

Browse files
tccontrenasbench
andauthored
Update detections/endpoint/windows_svchost_exe_parent_process_anomaly.yml
Co-authored-by: Nasreddine Bencherchali <[email protected]>
1 parent 2e9bc86 commit 1eb8731

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

detections/endpoint/windows_svchost_exe_parent_process_anomaly.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ drilldown_searches:
4444
earliest_offset: $info_min_time$
4545
latest_offset: $info_max_time$
4646
rba:
47-
message: A svchost.exe process was spawned by an unexpected parent process [$parent_process_name$] instead of services.exe on [$dest$].
47+
message: An svchost.exe process was spawned by an unexpected parent process [$parent_process_name$] instead of services.exe on [$dest$].
4848
risk_objects:
4949
- field: dest
5050
type: system

0 commit comments

Comments
 (0)