admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update windows_modify_registry_disable_windefender_notifications.yml

Browse Source
This commit is contained in:
tccontre
2023-05-15 12:16:36 +02:00
committed by GitHub
parent 23c615f96d
commit f028b1a8f0
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/endpoint/windows_modify_registry_disable_windefender_notifications.yml
+2 -1
View File
@@ -33,7 +33,8 @@ tags:
analytic_story:
- RedLine Stealer
asset_type: Endpoint
atomic_guid: 12e03af7-79f9-4f95-af48-d3f12f28a260
atomic_guid:
- 12e03af7-79f9-4f95-af48-d3f12f28a260
confidence: 70
impact: 70
message: A registry modification to disable Windows Defender notification on $dest$