Skip to content

Commit 1350ee7

Browse files
MakoWishgithub-actions[bot]
authored andcommitted
Correct misspelling of AppDara to AppData (#2952)
Co-authored-by: Jonhnathan <[email protected]> (cherry picked from commit d0d9982)
1 parent 1e3414a commit 1350ee7

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

rules/windows/defense_evasion_wsl_kalilinux.toml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
creation_date = "2023/01/12"
33
integration = ["endpoint", "windows"]
44
maturity = "production"
5-
updated_date = "2023/06/22"
5+
updated_date = "2023/07/20"
66
min_stack_comments = "New fields added: required_fields, related_integrations, setup"
77
min_stack_version = "8.3.0"
88

@@ -31,7 +31,7 @@ process where host.os.type == "windows" and event.type == "start" and
3131
(process.name : "wsl.exe" and process.args : ("-d", "--distribution", "-i", "--install") and process.args : "kali*") or
3232
process.executable :
3333
("?:\\Users\\*\\AppData\\Local\\packages\\kalilinux*",
34-
"?:\\Users\\*\\AppDara\\Local\\Microsoft\\WindowsApps\\kali.exe",
34+
"?:\\Users\\*\\AppData\\Local\\Microsoft\\WindowsApps\\kali.exe",
3535
"?:\\Program Files*\\WindowsApps\\KaliLinux.*\\kali.exe")
3636
)
3737
'''

0 commit comments

Comments
 (0)