valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-07 09:48:58 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

adjusted timestamp

Browse Source
This commit is contained in:
Florian Roth 2021-07-23 09:45:50 +02:00
parent d9dc442f4e
commit 5955efa750
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
rules/windows/file_event/win_hivenightmare_file_exports.yml
View File

@ -19,6 +19,7 @@ detection:
TargetFilename|contains:
- '\hive_sam_' # Go version
- '\SAM-2021-' # C++ version
- '\SAM-2022-' # C++ version
- '\Sam.save' # PowerShell version
condition: selection
fields: