Skip to content

Commit 1c19aca

Browse files
committed
fix TargetFileName
1 parent 0099e57 commit 1c19aca

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

rules/linux/process_creation/proc_creation_lnx_exfiltration_data_sftp_winscp.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ logsource:
1515
detection:
1616
selection:
1717
Image|contains: 'openssh/sftp-server'
18-
TargetFilename|endswith: '.filepart'
18+
TargetFileName|endswith: '.filepart'
1919
condition: selection
2020
falsepositives:
2121
- Legitimate use of the commands by administrators or system processes (excluding Wazuh)

0 commit comments

Comments
 (0)