Apply suggestions from code review

swachchhanda000 · Dec 4, 2023 · a800e86 · a800e86
1 parent 61a49ee
commit a800e86
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rules/windows/process_creation/proc_creation_win_hktl_winpwn.yml b/rules/windows/process_creation/proc_creation_win_hktl_winpwn.yml
@@ -38,7 +38,7 @@ detection:
             - 'WinPwn '
             - 'WinPwn.exe'
             - 'WinPwn.ps1'
-    condition: all of selection_*
+    condition: selection
 falsepositives:
     - Unknown
 level: high