fix: typo in command line argument (#4140)

SigmaHQ · Mar 24, 2023 · b83c8aa · b83c8aa
1 parent c5bb566
commit b83c8aa
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/rules/windows/process_creation/proc_creation_win_lolbin_dump64.yml b/rules/windows/process_creation/proc_creation_win_lolbin_dump64.yml
@@ -6,7 +6,7 @@ references:
     - https://twitter.com/mrd0x/status/1460597833917251595
 author: Austin Songer @austinsonger, Florian Roth
 date: 2021/11/26
-modified: 2022/12/25
+modified: 2023/03/24
 tags:
     - attack.credential_access
     - attack.t1003.001
@@ -19,7 +19,7 @@ detection:
     procdump_flags:
         CommandLine|contains:
             - ' -ma '
-            - 'accpeteula'
+            - 'accepteula'
     filter:
         Image|contains: '\Installer\Feedback\dump64.exe'
     condition: ( selection and not filter ) or ( selection and procdump_flags )