admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Branch was auto-updated.

Browse Source
This commit is contained in:
srv-rr-gh-researchbt
2023-06-27 15:51:39 -07:00
committed by GitHub
parent 93b43daedd 50feaac9e5
commit 46728f1fd1
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/endpoint/windows_files_and_dirs_access_rights_modification_via_icacls.yml
+1 -1
View File
@@ -38,7 +38,7 @@ tags:
message: Process name $process_name$ with access right modification argument executed by $user$ to change
security permission of a specific file or directory on host $dest$
mitre_attack_id:
- T1222.01
- T1222.001
- T1222
observable:
- name: dest