diff --git a/src/detections/detection.rs b/src/detections/detection.rs index d19722d3..0c3ce7cc 100644 --- a/src/detections/detection.rs +++ b/src/detections/detection.rs @@ -51,9 +51,9 @@ impl Detection { &application.detection(event_id, &event.system, event_data); } else if channel == "Microsoft-Windows-PowerShell/Operational" { &powershell.detection(event_id, &event.system, event_data); - } else if channel == "Microsoft-Windows-AppLocker/EXE and DLL" { + } else if channel == "Microsoft-Windows-Sysmon/Operational" { &sysmon.detection(event_id, &event.system, event_data); - } else if channel == "Microsoft-Windows-Applocker/Operational" { + } else if channel == "Microsoft-Windows-AppLocker/EXE and DLL" { &applocker.detection(event_id, &event.system, event_data); } else { //&other.detection();