From ee396fd81950623dfc2fb7f2725569d0e53b8bdb Mon Sep 17 00:00:00 2001 From: tccontre <26181693+tccontre@users.noreply.github.com> Date: Thu, 27 Jan 2022 10:17:29 +0100 Subject: [PATCH] Update disable_etw_through_registry.yml --- detections/endpoint/disable_etw_through_registry.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/detections/endpoint/disable_etw_through_registry.yml b/detections/endpoint/disable_etw_through_registry.yml index 78ce481563..92778aa40a 100644 --- a/detections/endpoint/disable_etw_through_registry.yml +++ b/detections/endpoint/disable_etw_through_registry.yml @@ -1,7 +1,7 @@ name: Disable ETW Through Registry id: f0eacfa4-d33f-11eb-8f9d-acde48001122 -version: 1 -date: '2021-06-22' +version: 2 +date: '2022-01-27' author: Teoderick Contreras, Splunk type: TTP datamodel: