admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

typo

Browse Source
This commit is contained in:
patel-bhavin
2022-06-01 12:37:43 -07:00
parent f4237cac86
commit 779ecc5847
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/endpoint/unload_sysmon_filter_driver.yml
+1 -1
View File
@@ -22,7 +22,7 @@ how_to_implement: You must be ingesting data that records process activity from
The command-line arguments are mapped to the "process" field in the Endpoint data
model. This search is also shipped with `unload_sysmon_filter_driver_filter` macro,
update this macro to filter out false positives.
known_false_positives: 'Unkown at the moment'
known_false_positives: 'Unknown at the moment'
references:
- https://www.ired.team/offensive-security/defense-evasion/unloading-sysmon-driver
tags: