fix: FPs with partial paths

phantinuss · Nov 21, 2023 · 2098312 · 2098312
1 parent f14dda3
commit 2098312
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...hunting/windows/process_creation/proc_creation_win_susp_file_permission_modifications.yml b/...hunting/windows/process_creation/proc_creation_win_susp_file_permission_modifications.yml
@@ -41,7 +41,7 @@ detection:
     filter_optional_vscode:
         CommandLine|contains:
             - '\AppData\Local\Programs\Microsoft VS Code'
-            - ':\Program Files\Microsoft VS Code\'
+            - ':\Program Files\Microsoft VS Code'
     filter_optional_avira:
         CommandLine|contains:
             - ':\Program Files (x86)\Avira\'