Cannot clone the rule SUSPICIOUS POWERSHELL USAGE (METHODOLOGY).
Opened this issue · 0 comments
67GuB39Ti1 commented
When I try to submit the unmodified cloned rule 'SUSPICIOUS POWERSHELL USAGE (METHODOLOGY)', a message saying "Failed to create indicator conditions, check your condition" is raised.