sigma
sigma copied to clipboard
Minor fix for rule regex
Summary of the Pull Request
Just adding a bracket to the regex
Changelog
fix: Dynamic .NET Compilation Via Csc.EXE - small regex fix fix: Csc.EXE Execution Form Potentially Suspicious Parent - small regex fix
Example Log Event
Fixed Issues
SigmaHQ Rule Creation Conventions
- If your PR adds new rules, please consider following and applying these conventions
Hi,
Thanks for the fix.
As the regex fix change the detection the field modified must be updated.