From 8528caf21de892191d7bec37422a6dd26a9097f8 Mon Sep 17 00:00:00 2001
From: Oddvar Moe <oddvar.moe@gmail.com>
Date: Fri, 28 Jun 2019 18:05:34 +0200
Subject: [PATCH] Added Acknowledgement to wsl.exe

---
 yml/OtherMSBinaries/Wsl.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/yml/OtherMSBinaries/Wsl.yml b/yml/OtherMSBinaries/Wsl.yml
index 490c12b..cdb1be4 100644
--- a/yml/OtherMSBinaries/Wsl.yml
+++ b/yml/OtherMSBinaries/Wsl.yml
@@ -28,4 +28,9 @@ Detection:
   - IOC: Child process from wsl.exe
 Resources:
   - Link: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules
+ Acknowledgement:
+  - Person: Alex Ionescu
+    Handle: '@aionescu'
+  - Person: Matt
+    Handle: '@NotoriousRebel1'
 ---