Hotfix/regex filename replace lack#296 (#297)

* fixed lacked replacement #286 * fixed typo #296
2021-12-18 11:06:08 +09:00
parent d668fc9241
commit ee80e6bc1e
1 changed files with 1 additions and 1 deletions
--- a/rules/hayabusa/alerts/System/7045_CreateOrModiftySystemProcess-WindowsService_MaliciousServiceInstalled.yml
+++ b/rules/hayabusa/alerts/System/7045_CreateOrModiftySystemProcess-WindowsService_MaliciousServiceInstalled.yml
@@ -20,7 +20,7 @@ detection:
            regexes: ./config/regex/detectlist_suspicous_services.txt
        ImagePath:
            min_length: 1000
-            allowlist: .allowlist_legitimate_services.txt
+            allowlist: ./config/regex/allowlist_legitimate_services.txt
    condition: selection
 falsepositives:
    - normal system usage