Files
splunk-security_content/lookups/prohibited_apps_launching_cmd.yml
2024-05-08 16:05:40 +00:00

6 lines
236 B
YAML

description: A list of processes that should not be launching cmd.exe
fields: prohibited_applications
filename: prohibited_apps_launching_cmd20231221.csv
match_type: WILDCARD(prohibited_applications)
name: prohibited_apps_launching_cmd