Files
splunk-security_content/lookups/zoom_first_time_child_process.yml
2020-05-28 13:31:49 -07:00

5 lines
190 B
YAML

description: A list of suspicious file names
collection: zoom_first_time_child_process
name: zoom_first_time_child_process
fields_list: _key, dest, process_name, firstTimeSeen, lastTimeSeen