admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

qakbot_2

Browse Source
This commit is contained in:
tccontre
2022-10-27 15:21:05 +02:00
parent e1b97cca68
commit c2cef88a36
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/endpoint/system_processes_run_from_unexpected_locations.yml
+1
View File
@@ -37,6 +37,7 @@ tags:
- Unusual Processes
- Ransomware
- Masquerading - Rename System Utilities
- Qakbot
asset_type: Endpoint
cis20:
- CIS 8