diff --git a/detections/endpoint/powershell_fileless_script_contains_base64_encoded_content.yml b/detections/endpoint/powershell_fileless_script_contains_base64_encoded_content.yml index 1126e21f90..860f2b891d 100644 --- a/detections/endpoint/powershell_fileless_script_contains_base64_encoded_content.yml +++ b/detections/endpoint/powershell_fileless_script_contains_base64_encoded_content.yml @@ -39,6 +39,7 @@ tags: - Malicious PowerShell - Winter Vivern - AsyncRAT + asset_type: Endpoint confidence: 80 context: - Source:Endpoint