admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Added detection testing service results inReg exe Manipulating Windows Services Registry Keys

Browse Source
This commit is contained in:
root
2020-11-26 16:26:31 +00:00
parent 43d2c73f03
commit cda72cfef3
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/endpoint/reg_exe_manipulating_windows_services_registry_keys.yml
+2
View File
@@ -38,3 +38,5 @@ tags:
security_domain: endpoint
asset_type: Endpoint
automated_detection_testing: passed
dataset:
- https://attack-range-attack-data.s3-us-west-2.amazonaws.com/T1574.011_custom_eb03d0db-448b-446f-8b46-d9bc39cc8cc7/windows-sysmon.log