Skip to content

Commit 7217019

Browse files
authored
fix rba message (#3934)
1 parent f930b52 commit 7217019

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

detections/endpoint/windows_dll_side_loading_in_calc.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ drilldown_searches:
4242
earliest_offset: $info_min_time$
4343
latest_offset: $info_max_time$
4444
rba:
45-
message: The [ $image$ ] process loaded the [ $ImageLoaded$ ] DLL from a non-standard location on [ $dest$ ]
45+
message: The [ $Image$ ] process loaded the [ $ImageLoaded$ ] DLL from a non-standard location on [ $dest$ ]
4646
risk_objects:
4747
- field: dest
4848
type: system

0 commit comments

Comments
 (0)