mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
Updating tactic
This commit is contained in:
@@ -39,7 +39,7 @@ tags:
|
||||
- Actions on Objectives
|
||||
message: plutil are executed on $host$ from $user$
|
||||
mitre_attack_id:
|
||||
- T1547.011
|
||||
- T1647
|
||||
nist:
|
||||
- DE.CM
|
||||
observable:
|
||||
|
||||
Reference in New Issue
Block a user