valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-08 02:08:54 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge pull request #335 from Codehardt/master

Browse Source 
fix: fixed reference list, otherwise it's not valid string list
This commit is contained in:
Florian Roth 2019-05-10 14:06:11 +02:00 committed by GitHub
commit 5dfe39c05b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rules/windows/process_creation/win_renamed_paexec.yml
View File

@ -2,7 +2,7 @@ title: Execution of Renamed PaExec
status: experimental
description: Detects execution of renamed paexec via imphash and executable product string
references:
- sha256: 01a461ad68d11b5b5096f45eb54df9ba62c5af413fa9eb544eacb598373a26bc
- sha256=01a461ad68d11b5b5096f45eb54df9ba62c5af413fa9eb544eacb598373a26bc
- https://summit.fireeye.com/content/dam/fireeye-www/summit/cds-2018/presentations/cds18-technical-s05-att&cking-fin7.pdf
tags:
- attack.defense_evasion