Update suspicious_process_file_path.yml

2026-06-08 17:32:49 +00:00 · 2023-03-01 10:53:03 -08:00
parent 0de5be9030
commit bbb9b5a421
1 changed files with 1 additions and 1 deletions
@@ -64,7 +64,7 @@ tags:
  impact: 70
  kill_chain_phases:
  - Exploitation
-  message: Suspicioues process $Processes.process_path$ running from suspicious
+  message: Suspicious process $process_name$ running from a suspicious proces path: $process_path$ on host:$dest$
    location
  mitre_attack_id:
  - T1543