From 3f519ffa2050910d1138f172634ce294a7be1196 Mon Sep 17 00:00:00 2001 From: GlebSukhodolskiy <56804667+GlebSukhodolskiy@users.noreply.github.com> Date: Thu, 7 Jan 2021 21:31:51 +0300 Subject: [PATCH] Just Check --- rules/windows/other/win_wmi_persistence.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/windows/other/win_wmi_persistence.yml b/rules/windows/other/win_wmi_persistence.yml index 405e657b..f3b47604 100644 --- a/rules/windows/other/win_wmi_persistence.yml +++ b/rules/windows/other/win_wmi_persistence.yml @@ -2,7 +2,7 @@ action: global title: WMI Persistence id: 0b7889b4-5577-4521-a60a-3376ee7f9f7b status: experimental -description: Detects suspicious WMI event filter and command line event consumer based on WMI and Security Logs +description: Detects suspicious WMI event filter and command line event consumer based on WMI and Security Logs. author: Florian Roth, Gleb Sukhodolskiy, Timur Zinniatullin oscd.community date: 2017/08/22 modified: 2020/10/13