From cbb2525ea8b3a3b09ccd99a656e4b852f65975f7 Mon Sep 17 00:00:00 2001 From: Bhavin Patel Date: Tue, 27 Jun 2023 15:38:21 -0700 Subject: [PATCH] CI failure --- ...ows_files_and_dirs_access_rights_modification_via_icacls.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/detections/endpoint/windows_files_and_dirs_access_rights_modification_via_icacls.yml b/detections/endpoint/windows_files_and_dirs_access_rights_modification_via_icacls.yml index bd891ca4e8..73563de677 100644 --- a/detections/endpoint/windows_files_and_dirs_access_rights_modification_via_icacls.yml +++ b/detections/endpoint/windows_files_and_dirs_access_rights_modification_via_icacls.yml @@ -38,7 +38,7 @@ tags: message: Process name $process_name$ with access right modification argument executed by $user$ to change security permission of a specific file or directory on host $dest$ mitre_attack_id: - - T1222.01 + - T1222.001 - T1222 observable: - name: dest