diff --git a/src/detections/rule/matchers.rs b/src/detections/rule/matchers.rs index 380b5c992..83bb9ad0a 100644 --- a/src/detections/rule/matchers.rs +++ b/src/detections/rule/matchers.rs @@ -1377,7 +1377,7 @@ mod tests { enabled: true detection: selection: - Computer|re: DESKTOP.* + Computer|re: DESKTOP details: 'command=%CommandLine%' "#; @@ -2844,4 +2844,4 @@ mod tests { check_select(rule_str, record_json_str, false); } -} +} \ No newline at end of file