valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-08 02:08:54 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Mitre tags changed

Browse Source
This commit is contained in:
S.kiran kumar 2020-10-18 08:08:25 +05:30 committed by GitHub
parent b8bf9465f7
commit 31ad3fcd6b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
rules/windows/sysmon/silenttrinity_stager_msbuild_activity.yml
View File

@ -3,6 +3,10 @@ id: 50e54b8d-ad73-43f8-96a1-5191685b17a4
description: Detects a possible remote connections to Silenttrinity c2
references:
- https://www.blackhillsinfosec.com/my-first-joyride-with-silenttrinity/
tags:
- t1127.001
- tA0002
- t1127
status: experimental
author: Kiran kumar s, oscd.community
date: 2020/10/11