Skip to content

Commit

Permalink
Update self-delete-using-alternate-data-streams.yml
Browse files Browse the repository at this point in the history
  • Loading branch information
dstepanic authored Apr 24, 2024
1 parent c967c52 commit 10941b1
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -48,6 +48,6 @@ rule:
- number: 0x10000 = DELETE
- and:
- instruction:
- description: Uses arithmetic to return FILE_INFORMATION_CLASS (FileRenameInfo)
- description: Uses arithmetic to return FILE_INFORMATION_CLASS (FileRenameInfo)
- mnemonic: lea
- offset: -0x1D

0 comments on commit 10941b1

Please sign in to comment.