admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

CI failure

Browse Source
This commit is contained in:
Bhavin Patel
2023-06-27 15:38:21 -07:00
parent 9cb3323100
commit cbb2525ea8
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/endpoint/windows_files_and_dirs_access_rights_modification_via_icacls.yml
+1 -1
View File
@@ -38,7 +38,7 @@ tags:
message: Process name $process_name$ with access right modification argument executed by $user$ to change
security permission of a specific file or directory on host $dest$
mitre_attack_id:
- T1222.01
- T1222.001
- T1222
observable:
- name: dest