diff --git a/host-interaction/process/inject/free-user-process-memory.yml b/host-interaction/process/inject/free-user-process-memory.yml index 8b0baec70..eb5ec915f 100644 --- a/host-interaction/process/inject/free-user-process-memory.yml +++ b/host-interaction/process/inject/free-user-process-memory.yml @@ -10,7 +10,7 @@ rule: mbc: - Memory::Free Memory [C0044] examples: - - 493167E85E45363D09495D0841C30648:0x404B00 + - 493167E85E45363D09495D0841C30648:0x404CA0 features: - and: - match: attach user process memory