the following detection (https://github.com/splunk/security_content/blob/develop/detections/endpoint/svchost_exe_lolbas_execution_process_spawn.yml) is missing the trailing $ for "$dest$" in the risk message tag.
Activity
swe commentedon Aug 31, 2022
Started a pull request to fix the issue