mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2024-12-28 15:58:24 +01:00
Quick fix for syntax and removed IOC
This commit is contained in:
parent
666e6e8645
commit
d93539bf9b
@ -22,7 +22,6 @@ Full_Path:
|
|||||||
- Path: C:\Windows\System32\desk.cpl
|
- Path: C:\Windows\System32\desk.cpl
|
||||||
- Path: C:\Windows\SysWOW64\desk.cpl
|
- Path: C:\Windows\SysWOW64\desk.cpl
|
||||||
Detection:
|
Detection:
|
||||||
- IOC:
|
|
||||||
- Sigma: https://github.com/SigmaHQ/sigma/blob/master/rules/windows/file_event/file_event_win_new_src_file.yml
|
- Sigma: https://github.com/SigmaHQ/sigma/blob/master/rules/windows/file_event/file_event_win_new_src_file.yml
|
||||||
- Sigma: https://github.com/SigmaHQ/sigma/blob/master/rules/windows/process_creation/proc_creation_win_rundll32_installscreensaver.yml
|
- Sigma: https://github.com/SigmaHQ/sigma/blob/master/rules/windows/process_creation/proc_creation_win_rundll32_installscreensaver.yml
|
||||||
Resources:
|
Resources:
|
||||||
@ -36,6 +35,6 @@ Acknowledgement:
|
|||||||
Handle: '@pabraeken'
|
Handle: '@pabraeken'
|
||||||
- Person: hai
|
- Person: hai
|
||||||
Handle: '@VakninHai'
|
Handle: '@VakninHai'
|
||||||
Person: Christopher Peacock
|
- Person: Christopher Peacock
|
||||||
Handle: '@SecurePeacock'
|
Handle: '@SecurePeacock'
|
||||||
---
|
---
|
||||||
|
Loading…
Reference in New Issue
Block a user