admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update suspicious_reg_exe_process.yml

Browse Source
This commit is contained in:
Michael Haag
2022-10-24 10:09:53 -06:00
parent 0fd8ed68f5
commit bdec923237
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/endpoint/suspicious_reg_exe_process.yml
+1 -1
View File
@@ -3,7 +3,7 @@ id: a6b3ab4e-dd77-4213-95fa-fc94701995e0
version: 4
date: '2020-07-22'
author: David Dorsey, Splunk
type: TTP
type: Anomaly
datamodel:
- Endpoint
description: This search looks for reg.exe being launched from a command prompt not