diff --git a/rules/windows/process_creation/proc_creation_win_invoke_obfuscation_obfuscated_iex_commandline.yml b/rules/windows/process_creation/proc_creation_win_invoke_obfuscation_obfuscated_iex_commandline.yml index af7cacec8..fea743c8f 100644 --- a/rules/windows/process_creation/proc_creation_win_invoke_obfuscation_obfuscated_iex_commandline.yml +++ b/rules/windows/process_creation/proc_creation_win_invoke_obfuscation_obfuscated_iex_commandline.yml @@ -6,7 +6,7 @@ references: - https://github.com/danielbohannon/Invoke-Obfuscation/blob/f20e7f843edd0a3a7716736e9eddfa423395dd26/Out-ObfuscatedStringCommand.ps1#L873-L888 author: 'Daniel Bohannon (@Mandiant/@FireEye), oscd.community' date: 2019/11/08 -modified: 2021/12/31 +modified: 2022/12/31 tags: - attack.defense_evasion - attack.t1027