reverting changes

mandiant · Feb 3, 2025 · 13b6bc0 · 13b6bc0
1 parent fe99a65
commit 13b6bc0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/host-interaction/file-system/windows-file-protection/bypass-windows-file-protection.yml b/host-interaction/file-system/windows-file-protection/bypass-windows-file-protection.yml
@@ -6,7 +6,7 @@ rule:
       - michael.hunhoff@mandiant.com
     scopes:
       static: function
-      dynamic: thread
+      dynamic: span of calls
     mbc:
       - Defense Evasion::Disable or Evade Security Tools::Bypass Windows File Protection [F0004.007]
     examples: