Files
splunk-security_content/macros/process_rclone.yml
Michael Haag b87061f794 rookie mistake
2021-11-30 05:34:29 -07:00

3 lines
173 B
YAML

definition: (Processes.original_file_name=rclone.exe OR Processes.process_name=rclone.exe)
description: Matches the process with its original file name.
name: process_rclone