valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-07 09:48:58 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fixed spelling mistake

Browse Source
This commit is contained in:
megan201296 2018-07-09 09:13:31 -05:00 committed by GitHub
parent c8fef4d093
commit a7ccfcb50d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
rules/windows/sysmon/sysmon_malware_backconnect_ports.yml
View File

@ -1,6 +1,6 @@
title: Suspicious Typical Malware Back Connect Ports
status: experimental
description: Detects programs that connect to typical malware back connetc ports based on statistical analysis from two different sandbox system databases
description: Detects programs that connect to typical malware back connect ports based on statistical analysis from two different sandbox system databases
references:
- https://docs.google.com/spreadsheets/d/17pSTDNpa0sf6pHeRhusvWG6rThciE8CsXTSlDUAZDyo
author: Florian Roth
@ -68,4 +68,4 @@ detection:
condition: selection and not filter
falsepositives:
- unknown
level: medium
level: medium