search

olafhartong / ThreatHunting

A Splunk app mapped to MITRE ATT&CK to guide your threat hunts
MIT License
1.12k stars 175 forks source link

Sanitize tab character from beginning of process_command_line whitelist #77

Open Karma1331 opened 3 years ago

Karma1331 commented 3 years ago

Copy and pasting process commands from Splunk adds a tab character at the beginning of the string.