Hi,
I got a detection rule to check for a text file in (c:\windows\system32\mytext.txt).I have set this up as a StaticPath using the full path. I also tried to do this using Windows as a 'Base Folder'. Then specifying System32\mytext.txt. Not sure what is up with this.
The rule was defined like this:
And
Or
Static Shortcut Target
Also tried:
And
Static Shortcut Target