valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-06 09:25:17 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update web_cve_2021_22005_vmware_file_upload

Browse Source
This commit is contained in:
Sittikorn S 2021-09-24 21:29:43 +07:00 committed by GitHub
parent 16452ca80e
commit f903640b73
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
rules/web/web_cve_2021_22005_vmware_file_upload
View File

@ -11,13 +11,13 @@ tags:
- attack.initial_access
- attack.t1190
logsource:
category: webserver
category: webserver
detection:
selection:
cs-method: 'POST'
c-uri|contains:
- '/analytics/telemetry/ph/api/hyper/send?'
condition: selection
condition: selection
falsepositives:
- Vulnerability Scanning/Pentesting
- Vulnerability Scanning/Pentesting
level: high