Files
splunk-security_content/lookups/is_nirsoft_software.yml
2025-04-24 18:23:55 +02:00

9 lines
278 B
YAML

name: is_nirsoft_software
date: 2025-04-24
version: 3
id: 28966a08-55e4-4ccb-a20d-dc4cc154b09c
author: Splunk Threat Research Team
lookup_type: csv
description: A subset of utilities provided by NirSoft that may be used by adversaries.
min_matches: 1
case_sensitive_match: false