admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Branch was auto-updated.

Browse Source
This commit is contained in:
srv-rr-gh-researchbt
2023-08-17 10:03:27 -07:00
committed by GitHub
parent 63d14c6014 cf35294e69
commit 03d19eca29
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/endpoint/unusually_long_command_line.yml
+2 -2
View File
@@ -32,13 +32,13 @@ tags:
asset_type: Endpoint
confidence: 60
impact: 70
message: Unusually long command line $Processes.process_name$ on $dest$
message: Unusually long command line $process_name$ on $dest$
observable:
- name: dest
type: Endpoint
role:
- Victim
- name: Processes.process_name
- name: process_name
type: Process
role:
- Attacker