valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-06 09:25:17 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix: Malicious Nishang PowerShell Commandlets FP with MDATP

Browse Source
This commit is contained in:
Florian Roth 2020-12-05 09:33:42 +01:00
parent f6c0fb2d33
commit 540039cbc3
1 changed files with 0 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
rules/windows/powershell/powershell_nishang_malicious_commandlets.yml
View File

@ -88,7 +88,6 @@ detection:
- NotAllNameSpaces
- exfill
- FakeDC
- Exploit
condition: keywords
falsepositives:
- Penetration testing