diff --git a/nursery/persist-via-userinitmprlogonscript-registry-value.yml b/nursery/persist-via-userinitmprlogonscript-registry-value.yml index ebbd3e3a..7022317a 100644 --- a/nursery/persist-via-userinitmprlogonscript-registry-value.yml +++ b/nursery/persist-via-userinitmprlogonscript-registry-value.yml @@ -14,7 +14,5 @@ rule: features: - and: - match: set registry value - - or: - - string: /SYSTEM\\(CurrentControlSet|ControlSet001)\\Control\\Session Manager\\Environment/i - - string: /Environment/i + - string: /Environment/i - string: /UserInitMprLogonScript/i