Fix condition

jiluhu · Apr 4, 2019 · 788e75e · 788e75e
1 parent 840eb2f
commit 788e75e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rules/windows/process_creation/win_susp_gup.yml b/rules/windows/process_creation/win_susp_gup.yml
@@ -14,7 +14,7 @@ logsource:
 detection:
     selection:
         Image: '*\GUP.exe'
-    condition: selection and not filter
+    condition: selection
 falsepositives:
     - Execution of tools named GUP.exe and located in folders different than Notepad++\updater
 level: high