admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Missed cloud

Browse Source
This commit is contained in:
ljstella
2024-08-19 10:32:38 -05:00
parent 15fe84c83a
commit 8a59b330ae
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/network/detect_windows_dns_sigred_via_zeek.yml
+4 -4
View File
@@ -1,7 +1,7 @@
name: Detect Windows DNS SIGRed via Zeek
id: c5c622e4-d073-11ea-87d0-0242ac130003
version: 2
date: '2024-05-23'
version: 3
date: '2024-08-19'
author: Shannon Davis, Splunk
status: experimental
type: TTP
@@ -32,10 +32,10 @@ tags:
mitre_attack_id:
- T1203
observable:
- name: dest
- name: flow_id
type: Other
role:
- Other
- Victim
product:
- Splunk Enterprise
- Splunk Enterprise Security