valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-07 09:48:58 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update win_renamed_meg.yml

Browse Source
This commit is contained in:
Sittikorn S 2021-06-22 22:03:56 +07:00 committed by GitHub
parent 268a4c31e3
commit f55cd9ed1b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
rules/windows/process_creation/win_renamed_meg.yml
View File

@ -7,8 +7,8 @@ references:
author: Sittikorn S
date: 2021/06/22
tags:
- attack.Defense_Evasion
- attack.T1218
- attack.defense_evasion
- attack.t1218
logsource:
product: windows
service: sysmon # require sysmon version >= 10.0