diff --git a/rules/windows/pipe_created/sysmon_mal_cobaltstrike_re.yml b/rules/windows/pipe_created/sysmon_mal_cobaltstrike_re.yml index 3a857bbc..1ecc14c6 100644 --- a/rules/windows/pipe_created/sysmon_mal_cobaltstrike_re.yml +++ b/rules/windows/pipe_created/sysmon_mal_cobaltstrike_re.yml @@ -6,7 +6,7 @@ references: - https://svch0st.medium.com/guide-to-named-pipes-and-hunting-for-cobalt-strike-pipes-dc46b2c5f575 - https://gist.github.com/MHaggis/6c600e524045a6d49c35291a21e10752 date: 2021/07/30 -modifed: 2021/09/02 +modified: 2021/09/02 author: Florian Roth tags: - attack.defense_evasion