diff --git a/detection-rules/impersonation_chrome_web_store_policy.yml b/detection-rules/impersonation_chrome_web_store_policy.yml index 068c6abb7fa..a54dda2abff 100644 --- a/detection-rules/impersonation_chrome_web_store_policy.yml +++ b/detection-rules/impersonation_chrome_web_store_policy.yml @@ -32,7 +32,6 @@ source: | or strings.icontains(body.html.raw, '
' ) - or strings.icount(body.html.display_text, 'Chrome Web Store') >= 3 or regex.icontains(body.html.display_text, 'Item name: [^\s]+ security extension' ) @@ -76,4 +75,4 @@ detection_methods: - "URL analysis" id: "4a98f283-8cc6-5864-bafb-e1908d0a5a8b" testing_pr: 2255 -testing_sha: 2053bcf7ff5c688996ca2d8eea98314e05a2d721 +testing_sha: ba363c8f980ad5d7cfaf33985a98a7c5ed7f99cd