admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update windows_service_created_with_suspicious_service_path.yml

Browse Source
This commit is contained in:
TheLawsOfChaos
2023-02-07 16:02:33 -05:00
committed by GitHub
parent add6570b67
commit d1fb0e3767
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/endpoint/windows_service_created_with_suspicious_service_path.yml
+2 -2
View File
@@ -41,7 +41,7 @@ tags:
kill_chain_phases:
- Exploitation
message: A service $Service_File_Name$ was created from a non-standard path using
$Service_Name $
$Service_Name$
mitre_attack_id:
- T1569
- T1569.002
@@ -67,7 +67,7 @@ tags:
- Service_File_Name
- Service_Type
- _time
- Service_Name
- Service_Name
- Service_Start_Type
- dest
risk_score: 56