admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update linux_ingress_tool_transfer_hunting.yml

Browse Source 
fixed risk
This commit is contained in:
Michael Haag
2022-07-29 11:19:42 -06:00
parent 8ad83a0b5f
commit 978e4c3ef7
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/endpoint/linux_ingress_tool_transfer_hunting.yml
+3 -3
View File
@@ -30,12 +30,12 @@ tags:
- CIS 3
- CIS 5
- CIS 16
confidence: 0
confidence: 10
context:
- Source:Endpoint
dataset:
- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1105/atomic_red_team/curl-linux-sysmon.log
impact: 0
impact: 10
kill_chain_phases:
- Delivery
- Installation
@@ -76,5 +76,5 @@ tags:
- Processes.parent_process_path
- Processes.process_path
- Processes.parent_process_id
risk_score: 0
risk_score: 1
security_domain: endpoint