valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-08 18:23:52 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update win_mshta_invoke_html.yml

Browse Source
This commit is contained in:
feedb 2020-10-18 15:05:01 +03:00
parent 91692e49cd
commit 5b35991cdd
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
rules/windows/process_creation/win_mshta_invoke_html.yml
View File

@ -4,8 +4,8 @@ date: 2020/10/18
description: Invoke an HTML Application via mshta.exe (Note - Pops a security warning and a print dialogue box).
references:
- https://github.com/LOLBAS-Project/LOLBAS/blob/master/yml/OSLibraries/Mshtml.yml
- https://twitter.com/pabraeken/status/998567549670477824
- https://windows10dll.nirsoft.net/mshtml_dll.html
- https://twitter.com/pabraeken/status/998567549670477824
- https://windows10dll.nirsoft.net/mshtml_dll.html
tags:
- attack.execution
- attack.t1085