fix channel for applocker

This commit is contained in:
kazuminn
2020-10-31 22:02:18 +09:00
parent dd5083ffc0
commit 355d43e24a

View File

@@ -50,7 +50,7 @@ impl Detection {
&application.detection(event_id, &event.system, event_data);
} else if channel == "Microsoft-Windows-PowerShell/Operational" {
&powershell.detection(event_id, &event.system, event_data);
} else if channel == "Microsoft-Windows-Sysmon/Operational" {
} else if channel == "Microsoft-Windows-AppLocker/EXE and DLL" {
&sysmon.detection(event_id, &event.system, event_data);
} else {
//&other.detection();