From f69b8abae1a3a708fa7f526deadf246b6e424128 Mon Sep 17 00:00:00 2001 From: Wietze Date: Wed, 2 Oct 2024 01:54:59 +0100 Subject: [PATCH] Removing empty resource sections --- YML-Schema.yml | 1 + yml/OSScripts/Cl_invocation.yml | 2 -- yml/OtherMSBinaries/Agentexecutor.yml | 2 -- 3 files changed, 1 insertion(+), 4 deletions(-) diff --git a/YML-Schema.yml b/YML-Schema.yml index 0ce084a..a452050 100644 --- a/YML-Schema.yml +++ b/YML-Schema.yml @@ -114,6 +114,7 @@ mapping: mapping: "Link": type: str + required: true pattern: '^http[s]?://(?:[a-zA-Z]|[0-9]|[$-_@.&+#~]|[!*\(\),]|(?:%[0-9a-fA-F][0-9a-fA-F]))+$' "Acknowledgement": type: seq diff --git a/yml/OSScripts/Cl_invocation.yml b/yml/OSScripts/Cl_invocation.yml index dd113f9..c7b884d 100644 --- a/yml/OSScripts/Cl_invocation.yml +++ b/yml/OSScripts/Cl_invocation.yml @@ -20,8 +20,6 @@ Code_Sample: Detection: - Sigma: https://github.com/SigmaHQ/sigma/blob/6312dd1d44d309608552105c334948f793e89f48/rules/windows/process_creation/proc_creation_win_lolbin_cl_invocation.yml - Sigma: https://github.com/SigmaHQ/sigma/blob/6312dd1d44d309608552105c334948f793e89f48/rules/windows/powershell/powershell_script/posh_ps_cl_invocation_lolscript.yml -Resources: - - Link: Acknowledgement: - Person: Jimmy Handle: '@bohops' diff --git a/yml/OtherMSBinaries/Agentexecutor.yml b/yml/OtherMSBinaries/Agentexecutor.yml index aeda424..8bb87dc 100644 --- a/yml/OtherMSBinaries/Agentexecutor.yml +++ b/yml/OtherMSBinaries/Agentexecutor.yml @@ -25,8 +25,6 @@ Code_Sample: Detection: - Sigma: https://github.com/SigmaHQ/sigma/blob/19396788dbedc57249a46efed2bb1927abc376d4/rules/windows/process_creation/proc_creation_win_lolbin_agentexecutor.yml - Sigma: https://github.com/SigmaHQ/sigma/blob/19396788dbedc57249a46efed2bb1927abc376d4/rules/windows/process_creation/proc_creation_win_lolbin_agentexecutor_susp_usage.yml -Resources: - - Link: Acknowledgement: - Person: Eleftherios Panos Handle: '@lefterispan'