From d0b0099973591d082c1963e3545878f2c929c90b Mon Sep 17 00:00:00 2001 From: tccontre Date: Wed, 16 Aug 2023 16:30:01 +0200 Subject: [PATCH] minor_fix_long_cmdline --- detections/endpoint/unusually_long_command_line.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/detections/endpoint/unusually_long_command_line.yml b/detections/endpoint/unusually_long_command_line.yml index fbcbd02368..2170b2a707 100644 --- a/detections/endpoint/unusually_long_command_line.yml +++ b/detections/endpoint/unusually_long_command_line.yml @@ -32,13 +32,13 @@ tags: asset_type: Endpoint confidence: 60 impact: 70 - message: Unusually long command line $Processes.process_name$ on $dest$ + message: Unusually long command line $process_name$ on $dest$ observable: - name: dest type: Endpoint role: - Victim - - name: Processes.process_name + - name: process_name type: Process role: - Attacker