valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-07 17:58:52 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fixed attack tags

Browse Source
This commit is contained in:
stvetro 2020-10-09 16:20:10 +04:00
parent 500fcfbcbe
commit 77d6984a65
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
rules/windows/process_creation/win_susp_ftp.yml
View File

@ -24,9 +24,9 @@ fields:
- ParentImage
tags:
- attack.execution
- attack.T1059
- attack.t1059
- attack.defense_evasion
- attack.T1202
- attack.t1202
falsepositives:
- Unknown
level: medium

4
rules/windows/process_creation/win_susp_runscripthelper.yml
View File

@ -19,9 +19,9 @@ fields:
- CommandLine
tags:
- attack.execution
- attack.T1059
- attack.t1059
- attack.defense_evasion
- attack.T1202
- attack.t1202
falsepositives:
- Unknown
level: medium