Merge pull request #16 from YamatoSecurity/feature/#15

Closed Feature/#15
Yamato-Security · Oct 13, 2020 · 57515a3 · 57515a3
2 parents dab0f04 + 83f6f86
commit 57515a3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/detections/powershell.rs b/src/detections/powershell.rs
@@ -52,7 +52,7 @@ impl PowerShell {
         if path == "".to_string() {
             let commandline = event_data.get("ScriptBlockText").unwrap_or(&default);
             if commandline.to_string() != default {
-                utils::check_command(4104, &commandline, 1000, 0, &default, &default, rdr);
+                utils::check_command(4104, &commandline, 1000, 0, &default, &default);
             }
         }
     }