valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-07 09:48:58 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update win_mal_flowcloud.yml

Browse Source
This commit is contained in:
Jonhnathan 2020-10-15 16:16:08 -03:00 committed by GitHub
parent ef646e74d8
commit 8d44548a2c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
rules/windows/malware/win_mal_flowcloud.yml
View File

@ -21,7 +21,8 @@ detection:
- 'HKLM\HARDWARE\{804423C2-F490-4ac3-BFA5-13DEDE63A71A}'
- 'HKLM\HARDWARE\{A5124AF5-DF23-49bf-B0ED-A18ED3DEA027}'
- 'HKLM\HARDWARE\{2DB80286-1784-48b5-A751-B6ED1F490303}'
- 'HKLM\SYSTEM\Setup\PrintResponsor\\*'
TargetObject|startswith:
- 'HKLM\SYSTEM\Setup\PrintResponsor\\'
condition: selection
falsepositives:
- Unknown