Skip to content

Conversation

@fencepost
Copy link

The -like operator only allows wildcards on the right side argument, so no agent names using wildcards could match (e.g. 'mesh*.exe')

Only the right-hand side of the -like operator can contain wildcards, so no $bin values that contained wildcards could ever match process names.
Swap 'if' args so wildcard is after -like to allow matching
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant