Skip to content

[BUG] Typo in windows_alternate_datastream___process_execution.yml - regscr32.exe should be regsvr32.exe #4076

Description

@aowen-nci

Describe the bug

regscr32.exe should be regsvr32.exe

Expected behavior

lolbin is regsvr32.exe

App Version:

  • Splunk Security Essentials

Additional context

URL: https://github.com/splunk/security_content/blob/develop/detections/endpoint/windows_alternate_datastream___process_execution.yml

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions