mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
Bhavin Patel
3 lines
278 B
YAML
3 lines
278 B
YAML
definition: lookup update=true is_nirsoft_software filename as process_name OUTPUT nirsoftFile | search nirsoftFile=true
|
|
description: This macro is related to potentially identifiable software related to NirSoft. Remove or filter as needed based.
|
|
name: is_nirsoft_software_macro |