From d460df3354ae67a2c216b265062829144c42e538 Mon Sep 17 00:00:00 2001
From: tccontre <26181693+tccontre@users.noreply.github.com>
Date: Fri, 14 Apr 2023 10:33:19 +0200
Subject: [PATCH] Update any_powershell_downloadstring.yml

---
 detections/endpoint/any_powershell_downloadstring.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/detections/endpoint/any_powershell_downloadstring.yml b/detections/endpoint/any_powershell_downloadstring.yml
index a615f7d163..5a15de9e89 100644
--- a/detections/endpoint/any_powershell_downloadstring.yml
+++ b/detections/endpoint/any_powershell_downloadstring.yml
@@ -36,6 +36,7 @@ tags:
   - Hermetic Wiper
   - Malicious PowerShell
   - HAFNIUM Group
+  - Data Destruction
   asset_type: Endpoint
   confidence: 70
   impact: 80