From f028b1a8f0430e613d331d03610947ebd7cedcd2 Mon Sep 17 00:00:00 2001 From: tccontre <26181693+tccontre@users.noreply.github.com> Date: Mon, 15 May 2023 12:16:36 +0200 Subject: [PATCH] Update windows_modify_registry_disable_windefender_notifications.yml --- ...ndows_modify_registry_disable_windefender_notifications.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/detections/endpoint/windows_modify_registry_disable_windefender_notifications.yml b/detections/endpoint/windows_modify_registry_disable_windefender_notifications.yml index 7e38a8b3c5..0524d51310 100644 --- a/detections/endpoint/windows_modify_registry_disable_windefender_notifications.yml +++ b/detections/endpoint/windows_modify_registry_disable_windefender_notifications.yml @@ -33,7 +33,8 @@ tags: analytic_story: - RedLine Stealer asset_type: Endpoint - atomic_guid: 12e03af7-79f9-4f95-af48-d3f12f28a260 + atomic_guid: + - 12e03af7-79f9-4f95-af48-d3f12f28a260 confidence: 70 impact: 70 message: A registry modification to disable Windows Defender notification on $dest$