From 897d1e7a11fa9565a4c55a42d8b1c702fe8ca609 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E6=9D=8E=E9=80=9A=E6=B4=B2?= Date: Wed, 2 Aug 2023 21:18:17 +0800 Subject: [PATCH] Windows (Terminal): don't detect wsl as terminal --- src/detection/terminalshell/terminalshell_windows.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/detection/terminalshell/terminalshell_windows.c b/src/detection/terminalshell/terminalshell_windows.c index aa38e0075..0bd65e578 100644 --- a/src/detection/terminalshell/terminalshell_windows.c +++ b/src/detection/terminalshell/terminalshell_windows.c @@ -305,6 +305,7 @@ static uint32_t getTerminalInfo(FFTerminalShellResult* result, uint32_t pid) ffStrbufIgnCaseEqualS(&result->terminalPrettyName, "nu") || ffStrbufIgnCaseEqualS(&result->terminalPrettyName, "powershell") || ffStrbufIgnCaseEqualS(&result->terminalPrettyName, "powershell_ise") || + ffStrbufIgnCaseEqualS(&result->terminalPrettyName, "wsl") || // running inside wsl ffStrbufStartsWithIgnCaseS(&result->terminalPrettyName, "ConEmuC") // wrapper process of ConEmu ) { //We are nested shell