valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-07 01:45:21 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update sysmon_notepad_network_connection.yml

Browse Source
This commit is contained in:
Jonhnathan 2020-10-15 16:21:38 -03:00 committed by GitHub
parent b479cbdb10
commit e20027965f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rules/windows/network_connection/sysmon_notepad_network_connection.yml
View File

@ -18,7 +18,7 @@ date: 2020/05/14
modified: 2020/08/24
detection:
selection:
Image: '*\notepad.exe'
Image|endswith: '\notepad.exe'
filter:
DestinationPort: '9100'
condition: selection and not filter