mirror of
https://github.com/valitydev/SigmaHQ.git
synced 2024-11-07 01:45:21 +00:00
Delete lnx_connection_proxy.yml
This commit is contained in:
parent
c4a1e853bc
commit
84c4683607
@ -1,20 +0,0 @@
|
||||
title: Connection Proxy
|
||||
id: 72f4ab3f-787d-495d-a55d-68c2ff46cf4c
|
||||
description: Detects setting proxy
|
||||
references:
|
||||
- https://attack.mitre.org/techniques/T1090/
|
||||
author: Ömer Günal
|
||||
date: 2020/06/17
|
||||
tags:
|
||||
- attack.defense_evasion
|
||||
- attack.t1154
|
||||
level: low
|
||||
logsource:
|
||||
product: linux
|
||||
detection:
|
||||
keyword:
|
||||
- 'http_proxy=*'
|
||||
- 'https_proxy=*'
|
||||
condition: keyword
|
||||
falsepositives:
|
||||
- Legitimate administration activities
|
Loading…
Reference in New Issue
Block a user