Update Desk.yml (#210)

Added Sigma rules.
This commit is contained in:
cr1sp4 2022-04-29 22:52:57 -04:00 committed by GitHub
parent 619aafbfa2
commit 666e6e8645
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -23,6 +23,8 @@ Full_Path:
- Path: C:\Windows\SysWOW64\desk.cpl
Detection:
- IOC:
- Sigma: https://github.com/SigmaHQ/sigma/blob/master/rules/windows/file_event/file_event_win_new_src_file.yml
- Sigma: https://github.com/SigmaHQ/sigma/blob/master/rules/windows/process_creation/proc_creation_win_rundll32_installscreensaver.yml
Resources:
- Link: https://vxug.fakedoma.in/zines/29a/29a7/Articles/29A-7.030.txt
- Link: https://twitter.com/pabraeken/status/998627081360695297
@ -34,4 +36,6 @@ Acknowledgement:
Handle: '@pabraeken'
- Person: hai
Handle: '@VakninHai'
Person: Christopher Peacock
Handle: '@SecurePeacock'
---