mirror of
https://github.com/valitydev/SigmaHQ.git
synced 2024-11-06 09:25:17 +00:00
add MITRE technique mapping
This commit is contained in:
parent
90bcc61ce3
commit
47502e6701
@ -18,3 +18,4 @@ falsepositives:
|
||||
level: medium
|
||||
tags:
|
||||
- attack.impact
|
||||
- attack.t1485
|
||||
|
@ -18,6 +18,7 @@ detection:
|
||||
level: low
|
||||
tags:
|
||||
- attack.impact
|
||||
- attack.t1485
|
||||
falsepositives:
|
||||
- EKS Cluster being created or deleted may be performed by a system administrator.
|
||||
- Verify whether the user identity, user agent, and/or hostname should be making changes in your environment.
|
||||
|
Loading…
Reference in New Issue
Block a user