admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update windows_application_layer_protocol_rms_radmin_tool_namedpipe.yml

Browse Source
This commit is contained in:
tccontre
2022-06-24 14:29:36 +02:00
committed by GitHub
parent e9137cc822
commit f1f1ef47c7
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/endpoint/windows_application_layer_protocol_rms_radmin_tool_namedpipe.yml
+2 -2
View File
@@ -34,7 +34,7 @@ tags:
confidence: 90
context:
- Source:Endpoint
- Stage:Command and Control
- Stage:Command And Control
dataset:
- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/malware/azorult/sysmon.log
impact: 90
@@ -63,4 +63,4 @@ tags:
- Computer
- UserID
risk_score: 81
security_domain: endpoint
security_domain: endpoint