Closed CR-OfirTal closed 1 month ago
Just adding a bracket to the regex
fix: Dynamic .NET Compilation Via Csc.EXE - small regex fix fix: Csc.EXE Execution Form Potentially Suspicious Parent - small regex fix
Hi, Thanks for the fix. As the regex fix change the detection the field modified must be updated.
modified
Summary of the Pull Request
Just adding a bracket to the regex
Changelog
fix: Dynamic .NET Compilation Via Csc.EXE - small regex fix fix: Csc.EXE Execution Form Potentially Suspicious Parent - small regex fix
Example Log Event
Fixed Issues
SigmaHQ Rule Creation Conventions