fix: casing of `Win32_ShadowCopy` - Githubissues

SigmaHQ / sigma

Main Sigma Rule Repository

Other

7.84k stars 2.12k forks source link

fix: casing of `Win32_ShadowCopy` #4859

Closed vburov closed 1 month ago

vburov commented 1 month ago

"Win32_ShadowCopy" is more correct and it is important when rule is transformed in case-sensitive mode.

Summary of the Pull Request

Changelog

Example Log Event

Fixed Issues

SigmaHQ Rule Creation Conventions

If your PR adds new rules, please consider following and applying these conventions