valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-06 09:25:17 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update lnx_auditd_system_info_discovery2.yml

Browse Source
This commit is contained in:
frack113 2021-09-14 21:02:51 +02:00 committed by GitHub
parent a3477893de
commit a6da209507
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
rules/linux/auditd/lnx_auditd_system_info_discovery2.yml
View File

@ -7,7 +7,7 @@ status: stable
description: Detects system information discovery commands
author: Ömer Günal, oscd.community
date: 2020/10/08
modified: 2020/05/30
modified: 2021/09/14
references:
- https://github.com/redcanaryco/atomic-red-team/blob/master/atomics/T1082/T1082.md
tags:
@ -32,4 +32,4 @@ detection:
condition: selection
falsepositives:
- Legitimate administration activities
level: informational
level: informational