From 2d6571008e5d5bdb5fb605782f02f9f2786a93ab Mon Sep 17 00:00:00 2001
From: wikijm <wikijm@users.noreply.github.com>
Date: Thu, 14 Nov 2024 08:06:58 +0100
Subject: [PATCH] Update pdq_connect_network_sigma.yml

---
 detections/sigma/pdq_connect_network_sigma.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/detections/sigma/pdq_connect_network_sigma.yml b/detections/sigma/pdq_connect_network_sigma.yml
index da9d3ea0..dc9ecbf6 100644
--- a/detections/sigma/pdq_connect_network_sigma.yml
+++ b/detections/sigma/pdq_connect_network_sigma.yml
@@ -7,6 +7,7 @@ detection:
     DestinationHostname|endswith:
     - app.pdq.com
     - cfcdn.pdq.com
+    - pdqinstallers.*.r2.cloudflarestorage.com
   condition: selection
 id: e27c6d0b-9d16-4eb3-9abd-8ba0a2cc0f6e
 status: experimental