From cfd765ce7bf31e995d83294e23ece4c3c516cd5f Mon Sep 17 00:00:00 2001 From: research-bot Date: Tue, 10 Dec 2024 09:49:34 -0800 Subject: [PATCH] updating mitre id --- detections/endpoint/windows_lateral_tool_transfer_remcom.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/detections/endpoint/windows_lateral_tool_transfer_remcom.yml b/detections/endpoint/windows_lateral_tool_transfer_remcom.yml index 19a7cc815e..6f701e6fd5 100644 --- a/detections/endpoint/windows_lateral_tool_transfer_remcom.yml +++ b/detections/endpoint/windows_lateral_tool_transfer_remcom.yml @@ -33,7 +33,7 @@ tags: impact: 80 message: An instance of $parent_process_name$ spawning $process_name$ was identified on endpoint $dest$ by user $user$ attempting to move laterally. mitre_attack_id: - - T1570 + - T1569.002 observable: - name: user type: User