valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-06 09:25:17 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update process_creation_certoc_execution.yml

Browse Source
This commit is contained in:
Austin Songer 2021-10-24 11:06:51 -05:00 committed by GitHub
parent a78d6cce5f
commit 85d7cb6f3e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rules/windows/process_creation/process_creation_certoc_execution.yml
View File

@ -1,4 +1,4 @@
title: Install Certificate via CertOC.exe
title: Suspicious Load DLL via CertOC.exe
id: 242301bc-f92f-4476-8718-78004a6efd9f
description: Detects when a user installs certificates by using CertOC.exe to loads the target DLL file.
status: experimental