From 0018b66e7da30e91620cd3bbd130adbbffbd5074 Mon Sep 17 00:00:00 2001 From: "uncleP@sk" Date: Thu, 15 Oct 2020 11:55:57 +0300 Subject: [PATCH] The author field escape char added --- .../windows/process_creation/win_susp_use_of_sqltoolsps_bin.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/windows/process_creation/win_susp_use_of_sqltoolsps_bin.yml b/rules/windows/process_creation/win_susp_use_of_sqltoolsps_bin.yml index f87a9852e..9091c9a2e 100644 --- a/rules/windows/process_creation/win_susp_use_of_sqltoolsps_bin.yml +++ b/rules/windows/process_creation/win_susp_use_of_sqltoolsps_bin.yml @@ -10,7 +10,7 @@ tags: - attack.t1059.001 - attack.defense_evasion - attack.t1127 -author: Agro (@agro_sev) oscd.community +author: 'Agro (@agro_sev)' oscd.community date: 2020/10/13 logsource: category: process_creation