One BIOC with OR for Process name and CMD

[Bouzeghoub]

Hi,

Please have you solution when we want to create one BIOC with two deferent process name or CMD.

EX: NAME: powershell.exe or CMD: ping

or we must split to two BIOC.

Best regards.  

[ssingh32]

Hi,

Please refer the below image.Yes,we can add two or more process by adding pipe.

Please mark the solution as accepted ,if it helps.

[Bouzeghoub]

Thank you @ssingh32, but this BIOC is:

powershell.exe or cmd.exe or certutil.exe AND ping * or netstat *

Please I want powershell.exe or cmd.exe or certutil.exe OR ping * or netstat *

BR