Update win_invoke_obfuscation_via_rundll.yml · 0c934ea455 - blue-team-tools - GreySec Git

security-tools/blue-team-tools

Update win_invoke_obfuscation_via_rundll.yml

This commit is contained in:

Timur Zinniatullin

2020-10-18 18:54:31 +03:00

committed by

GitHub

parent 98febd2101

commit 0c934ea455

1 changed files with 1 additions and 1 deletions

									
										rules/windows/process_creation/win_invoke_obfuscation_via_rundll.yml
									
		+1
		-1
	
												View File
												
				@@ -20,4 +20,4 @@ detection:

				    condition: selection

				falsepositives:

				    - Unknown

				level: high 

				level: medium