update rule

mandiant · Oct 6, 2023 · d4660c5 · d4660c5
1 parent 4cd0d48
commit d4660c5
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/nursery/capture-process-snapshot.yml → nursery/capture-process-snapshot-data.yml b/nursery/capture-process-snapshot.yml → nursery/capture-process-snapshot-data.yml
@@ -1,10 +1,12 @@
 rule:
   meta:
-    name: capture process snapshot
+    name: capture process snapshot data
     namespace: host-interaction/process/dump
     authors:
       - "@mr-tz"
     scope: function
   features:
     - or:
       - api: PssCaptureSnapshot
+      - api: PssQuerySnapshot
+      - api: PssWalkSnapshot