security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity

fix: duplicate UUIDs

Browse Source
This commit is contained in:
Florian Roth
2022-09-07 17:12:12 +02:00
parent a69d256367
commit 1641f4590a
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/image_load/image_load_sysmon_disable_sharpevtmute.yml
+1 -1
View File
@@ -1,5 +1,5 @@
title: SharpEvtMute EvtMuteHook Load
id: bedfc8ad-d1c7-4e37-a20e-e2b0dbee759c
id: 49329257-089d-46e6-af37-4afce4290685
status: experimental
description: Detects the load of EvtMuteHook.dll, a key component of SharpEvtHook, a tool to tamper with Windows event logs
references: