diff --git a/rules/windows/process_creation/proc_creation_win_tools_uac_bypass_computerdefaults.yml b/rules/windows/process_creation/proc_creation_win_tools_uac_bypass_computerdefaults.yml index fe48e2e45..19e5917e1 100644 --- a/rules/windows/process_creation/proc_creation_win_tools_uac_bypass_computerdefaults.yml +++ b/rules/windows/process_creation/proc_creation_win_tools_uac_bypass_computerdefaults.yml @@ -1,6 +1,6 @@ title: UAC Bypass Tools Using ComputerDefaults id: 3c05e90d-7eba-4324-9972-5d7f711a60a8 -description: Detects tools such as UACMe used to bypass UAC with computerdefaults.exe +description: Detects tools such as UACMe used to bypass UAC with computerdefaults.exe (UACMe 59) author: Christian Burkard date: 2021/08/31 status: experimental