From 20b851f643538c25b66bf6e4db5deae92c39ef59 Mon Sep 17 00:00:00 2001 From: Lou Stella Date: Wed, 26 Apr 2023 09:12:44 -0500 Subject: [PATCH] removed sfc to normalize with 4.0.1 --- .../ssa___system_process_running_from_unexpected_location.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/dev_ssa/endpoint/ssa___system_process_running_from_unexpected_location.yml b/dev_ssa/endpoint/ssa___system_process_running_from_unexpected_location.yml index 8ff5f73def..555b63bb31 100644 --- a/dev_ssa/endpoint/ssa___system_process_running_from_unexpected_location.yml +++ b/dev_ssa/endpoint/ssa___system_process_running_from_unexpected_location.yml @@ -108,7 +108,6 @@ search: - shutdown.exe - shrpubw.exe - shadow.exe - - sfc.exe - setx.exe - setupugc.exe - setupcl.exe