From d5818a417b5fd3740120915d3917dcae51756084 Mon Sep 17 00:00:00 2001 From: sbousseaden Date: Wed, 3 Apr 2019 21:49:30 +0200 Subject: [PATCH] Update win_impacket_secretdump.yml --- rules/windows/builtin/win_impacket_secretdump.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/windows/builtin/win_impacket_secretdump.yml b/rules/windows/builtin/win_impacket_secretdump.yml index 959d0494..9e12ccba 100644 --- a/rules/windows/builtin/win_impacket_secretdump.yml +++ b/rules/windows/builtin/win_impacket_secretdump.yml @@ -5,7 +5,7 @@ references: - https://blog.menasec.net/2019/02/threat-huting-10-impacketsecretdump.html tags: - attack.credential_access - - attack.T1003 + - attack.t1003 logsource: product: windows service: security