Merge pull request #815 from mandiant/rules52-33

mandiant · Aug 19, 2023 · a20c17d · a20c17d
2 parents d61f70b + 64d3a35
commit a20c17d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/host-interaction/process/inject/free-user-process-memory.yml b/host-interaction/process/inject/free-user-process-memory.yml
@@ -10,7 +10,7 @@ rule:
     mbc:
       - Memory::Free Memory [C0044]
     examples:
-      - 493167E85E45363D09495D0841C30648:0x404B00
+      - 493167E85E45363D09495D0841C30648:0x404CA0
   features:
     - and:
       - match: attach user process memory