valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-07 09:48:58 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge pull request #965 from IPv777/patch-2

Browse Source 
.002 	= 	SMB/Windows Admin Shares
This commit is contained in:
Florian Roth 2020-08-03 18:05:12 +02:00 committed by GitHub
commit fa36adfe6d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rules/windows/process_creation/win_susp_copy_lateral_movement.yml
View File

@ -10,7 +10,7 @@ tags:
- attack.lateral_movement - attack.lateral_movement
- attack.t1077 - attack.t1077
- attack.t1105 - attack.t1105
- attack.t1021 - attack.t1021.002
logsource: logsource:
category: process_creation category: process_creation
product: windows product: windows