diff --git a/dist/ssa/detections/attempt_to_delete_services.yml b/dist/ssa/detections/attempt_to_delete_services.yml index 4e4711df40..84a8d5688e 100644 --- a/dist/ssa/detections/attempt_to_delete_services.yml +++ b/dist/ssa/detections/attempt_to_delete_services.yml @@ -12,7 +12,7 @@ how_to_implement: To successfully implement this search, you need to be ingestin Sysmon TA. Tune and filter known instances where renamed sc.exe may be used. id: a0c8c292-d01a-11eb-aa18-acde48001122 known_false_positives: unknown -name: Attempt To delete Services +name: Attempt To Delete Services product: - Splunk Behavioral Analytics references: