valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-07 09:48:58 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Updated tags

Browse Source
This commit is contained in:
Aidan Bracher 2020-07-18 02:44:53 +01:00
parent b61527d0b2
commit 1442812681
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rules/windows/process_creation/win_susp_disable_ie_features.yml
View File

@ -5,7 +5,9 @@ description: Detects command lines that indicate unwanted modifications to regis
references: references:
- https://unit42.paloaltonetworks.com/operation-ke3chang-resurfaces-with-new-tidepool-malware/ - https://unit42.paloaltonetworks.com/operation-ke3chang-resurfaces-with-new-tidepool-malware/
tags: tags:
- attack.defense_evasion
- attack.t1089 - attack.t1089
- attack.t1562.001
author: Florian Roth author: Florian Roth
date: 2020/06/19 date: 2020/06/19
logsource: logsource: