admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'brute-ratel-3' of github.com:splunk/security_content into brute-ratel-3

Browse Source
This commit is contained in:
tccontre
2022-09-01 16:42:45 +02:00
parent a482779b41 324b58bf12
commit f68b07ff28
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/endpoint/windows_service_deletion_in_registry.yml
+1 -1
View File
@@ -39,7 +39,7 @@ tags:
- Stage:Defense Evasion
dataset:
- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/malware/brute_ratel/service_deletion/sysmon.log
impact: 70
impact: 80
kill_chain_phases:
- Exploitation
message: a service registry $Registry.registry_path$ was deleted in $Registry.dest$