From c9994e858a71df13eabbe94d0cd0081afed57297 Mon Sep 17 00:00:00 2001
From: Bart <3075118+bartblaze@users.noreply.github.com>
Date: Thu, 8 Jan 2026 12:41:48 +0100
Subject: [PATCH] Add devcon

---
 modules/signatures/windows/windows_utilities.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/modules/signatures/windows/windows_utilities.py b/modules/signatures/windows/windows_utilities.py
index 3af6b428..f3fe2d20 100644
--- a/modules/signatures/windows/windows_utilities.py
+++ b/modules/signatures/windows/windows_utilities.py
@@ -163,6 +163,8 @@ def run(self):
             "csvde",
             "del ",
             "del.exe",
+            "devcon ",
+            "devcon.exe",
             "diskshadow",
             "dsquery",
             "icacls",