diff --git a/host-interaction/console/manipulate-console.yml b/host-interaction/console/manipulate-console.yml index 28624221..f6abf885 100644 --- a/host-interaction/console/manipulate-console.yml +++ b/host-interaction/console/manipulate-console.yml @@ -17,4 +17,4 @@ rule: - api: kernel32.WriteConsoleInput - optional: - api: kernel32.GetStdHandle - - number: -11 = STD_OUTPUT_HANDLE + - number: 0xfffffff5 = STD_OUTPUT_HANDLE