fix: FP with expression

lukiffer · Oct 20, 2020 · ee789a3 · ee789a3
1 parent 198b292
commit ee789a3
Showing 1 changed file with 0 additions and 1 deletion.
diff --git a/rules/windows/powershell/powershell_nishang_malicious_commandlets.yml b/rules/windows/powershell/powershell_nishang_malicious_commandlets.yml
@@ -75,7 +75,6 @@ detection:
         - TexttoExe
         - Powerpreter
         - Nishang
-        - EncodedData
         - DataToEncode
         - LoggedKeys
         - OUT-DNSTXT