valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-07 17:58:52 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge pull request #1458 from P4rtyH4RD/P4rtyH4RD-patch-1-mitre-code

Browse Source 
Update powershell_suspicious_getprocess_lsass.yml
This commit is contained in:
Florian Roth 2021-05-14 08:59:14 +02:00 committed by GitHub
commit 83068416fa
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rules/windows/powershell/powershell_suspicious_getprocess_lsass.yml
View File

@ -6,7 +6,7 @@ references:
- https://twitter.com/PythonResponder/status/1385064506049630211
tags:
- attack.credential_access
- attack.t1552.004
- attack.t1003.001
author: Florian Roth
date: 2021/04/23
logsource: