From df412ca5bb316f90394b531a3dec4782634702df Mon Sep 17 00:00:00 2001 From: tccontre <26181693+tccontre@users.noreply.github.com> Date: Thu, 13 Apr 2023 19:15:34 +0200 Subject: [PATCH] Update powershell_fileless_script_contains_base64_encoded_content.yml --- ...owershell_fileless_script_contains_base64_encoded_content.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/detections/endpoint/powershell_fileless_script_contains_base64_encoded_content.yml b/detections/endpoint/powershell_fileless_script_contains_base64_encoded_content.yml index 1126e21f90..860f2b891d 100644 --- a/detections/endpoint/powershell_fileless_script_contains_base64_encoded_content.yml +++ b/detections/endpoint/powershell_fileless_script_contains_base64_encoded_content.yml @@ -39,6 +39,7 @@ tags: - Malicious PowerShell - Winter Vivern - AsyncRAT + asset_type: Endpoint confidence: 80 context: - Source:Endpoint