valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-06 17:35:19 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix: rules with duplicate tags

Browse Source
This commit is contained in:
Florian Roth 2020-07-27 11:44:47 +02:00
parent 051e2ce905
commit 80f4b4ec71
10 changed files with 0 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rules/compliance/cleartext_protocols.yml
View File

@ -30,8 +30,6 @@ tags:
- NIST CSF 1.1 PR.AC-7
- NIST CSF 1.1 PR.DS-1
- NIST CSF 1.1 PR.DS-2
- NIST CSF 1.1 PR.PT-3
- NIST CSF 1.1 PR.PT-3
- ISO 27002-2013 A.9.2.1
- ISO 27002-2013 A.9.2.2
- ISO 27002-2013 A.9.2.3

1
rules/network/cisco/aaa/cisco_cli_clear_logs.yml
View File

@ -12,7 +12,6 @@ tags:
- attack.t1146
- attack.t1070
- attack.t1070.003
- attack.t1070
logsource:
product: cisco
service: aaa

1
rules/windows/builtin/win_susp_eventlog_cleared.yml
View File

@ -10,7 +10,6 @@ tags:
- attack.defense_evasion
- attack.t1070
- car.2016-04-002
- attack.t1070
logsource:
product: windows
service: system

1
rules/windows/builtin/win_susp_security_eventlog_cleared.yml
View File

@ -5,7 +5,6 @@ tags:
- attack.defense_evasion
- attack.t1070
- car.2016-04-002
- attack.t1070
author: Florian Roth
date: 2017/02/19
logsource:

1
rules/windows/process_creation/win_etw_trace_evasion.yml
View File

@ -12,7 +12,6 @@ tags:
- attack.execution
- attack.t1070
- car.2016-04-002
- attack.t1070
level: high
logsource:
category: process_creation

1
rules/windows/process_creation/win_malware_notpetya.yml
View File

@ -16,7 +16,6 @@ tags:
- attack.t1003
- car.2016-04-002
- attack.t1218.011
- attack.t1070
logsource:
category: process_creation
product: windows

1
rules/windows/process_creation/win_shadow_copies_deletion.yml
View File

@ -15,7 +15,6 @@ tags:
- attack.impact
- attack.t1070
- attack.t1490
- attack.t1070
logsource:
category: process_creation
product: windows

1
rules/windows/process_creation/win_susp_bcdedit.yml
View File

@ -11,7 +11,6 @@ tags:
- attack.t1070
- attack.persistence
- attack.t1067
- attack.t1070
- attack.t1542.003
logsource:
category: process_creation

1
rules/windows/process_creation/win_susp_eventlog_clear.yml
View File

@ -11,7 +11,6 @@ tags:
- attack.defense_evasion
- attack.t1070
- car.2016-04-002
- attack.t1070
level: high
logsource:
category: process_creation

1
rules/windows/process_creation/win_susp_fsutil_usage.yml
View File

@ -12,7 +12,6 @@ references:
tags:
- attack.defense_evasion
- attack.t1070
- attack.t1070
logsource:
category: process_creation
product: windows