remove redundant CheckHostnameMismatch (#3881)

remove redundant CheckHostnameMismatch
Velocidex · Nov 6, 2024 · 0782427 · 0782427
1 parent 4f3c8f3
commit 0782427
Showing 1 changed file with 1 addition and 4 deletions.
diff --git a/artifacts/definitions/Windows/Forensics/Lnk.yaml b/artifacts/definitions/Windows/Forensics/Lnk.yaml
@@ -108,9 +108,6 @@ parameters:
     description: Regex for suspicious TrackerData Hastname.
     type: regex
     default: ^(Win-|Desktop-|Commando$)
-  - name: CheckHostnameMismatch
-    description: Compare TrackerData.MachineID with Hostname (noisy in many networks)
-    type: bool
   - name: VmPrefixMAC
     description: VM MacAddress prefix regex to compate to LNK TrackerData.
     type: regex
@@ -1553,4 +1550,4 @@ column_types:
   - name: ShellLinkHeader.AccessTime
     type: timestamp
   - name: ShellLinkHeader.WriteTime
-    type: timestamp
+    type: timestamp