fireeye/HXTool

Cannot clone the rule SUSPICIOUS POWERSHELL USAGE (METHODOLOGY).

Opened this issue · 0 comments

When I try to submit the unmodified cloned rule 'SUSPICIOUS POWERSHELL USAGE (METHODOLOGY)', a message saying "Failed to create indicator conditions, check your condition" is raised.