From 0fac306bbc02a45f035cece261d99c1c4998e5cf Mon Sep 17 00:00:00 2001 From: tccontre Date: Wed, 29 Jun 2022 11:15:09 +0200 Subject: [PATCH] azorult-bomb2 --- detections/endpoint/wmic_noninteractive_app_uninstallation.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/detections/endpoint/wmic_noninteractive_app_uninstallation.yml b/detections/endpoint/wmic_noninteractive_app_uninstallation.yml index adf2b02eaf..3f6a4272ff 100644 --- a/detections/endpoint/wmic_noninteractive_app_uninstallation.yml +++ b/detections/endpoint/wmic_noninteractive_app_uninstallation.yml @@ -31,6 +31,7 @@ references: tags: analytic_story: - IceID + - Azorult confidence: 50 context: - Source:Endpoint