From 3597a235d7a8beab6618d9af857704ed1ff28e8c Mon Sep 17 00:00:00 2001 From: Eric Conrad Date: Tue, 19 Sep 2017 08:45:58 -0400 Subject: [PATCH] Update DeepWhite.md --- DeepWhite.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/DeepWhite.md b/DeepWhite.md index 3cd8b73..6c397c8 100644 --- a/DeepWhite.md +++ b/DeepWhite.md @@ -64,5 +64,5 @@ Also see @swiftonsecurity's awesome Sysmon config here: https://github.com/Swift Generate a custom whitelist on Windows (note: this is optional): ``` -PS> Get-ChildItem c:\windows\system32 -Include '*.exe','*.dll','*.sys','*.com' -Recurse | Get-FileHash| Export-Csv -Path whitelist.csv +PS C:\> Get-ChildItem c:\windows\system32 -Include '*.exe','*.dll','*.sys','*.com' -Recurse | Get-FileHash| Export-Csv -Path whitelist.csv ```