From d5a1d0010e04ff5bf1abed97cd58698409a3a0f3 Mon Sep 17 00:00:00 2001
From: Rod Soto <50486899+rosplk@users.noreply.github.com>
Date: Wed, 1 Jun 2022 17:19:38 -0700
Subject: [PATCH] added cis tags

---
 ...k_protocol_impersonation_weak_encryption_simplerequest.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/detections/application/splunk_protocol_impersonation_weak_encryption_simplerequest.yml b/detections/application/splunk_protocol_impersonation_weak_encryption_simplerequest.yml
index 5c653533c7..a0d7b45a46 100644
--- a/detections/application/splunk_protocol_impersonation_weak_encryption_simplerequest.yml
+++ b/detections/application/splunk_protocol_impersonation_weak_encryption_simplerequest.yml
@@ -18,6 +18,10 @@ tags:
   asset_type: Endpoint
   cve:
   - CVE-2022-32152
+  cis20:
+  - CIS 3
+  - CIS 5
+  - CIS 16
   confidence: 80
   context:
   - Source:Endpoint