Update host-interaction/process/inject/inject-shellcode-using-window-…

…subclass-procedure.yml Co-authored-by: Willi Ballenthin <[email protected]>
mandiant · Jul 6, 2023 · 1d6c6cb · 1d6c6cb
1 parent fb55d37
commit 1d6c6cb
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/host-interaction/process/inject/inject-shellcode-using-window-subclass-procedure.yml b/host-interaction/process/inject/inject-shellcode-using-window-subclass-procedure.yml
@@ -20,7 +20,7 @@ rule:
       - match: find graphical window
       - match: open process
       - match: write process memory
-      - api: SetProp
+      - api: user32.SetProp
       - or:
         - api: PostMessage
         - api: SendNotifyMessage