From 1a0e2b3c8e005aca8a4ce48ca867846c1624901a Mon Sep 17 00:00:00 2001
From: Alexey Lednyov <lednyov.av@gmail.com>
Date: Sat, 17 Oct 2020 08:46:57 +0300
Subject: [PATCH] Add a technique tag

---
 .../registry_event/sysmon_win_reg_telemetry_persistence.yml      | 1 +
 1 file changed, 1 insertion(+)

diff --git a/rules/windows/registry_event/sysmon_win_reg_telemetry_persistence.yml b/rules/windows/registry_event/sysmon_win_reg_telemetry_persistence.yml
index 4a87d0fda..67963ff93 100644
--- a/rules/windows/registry_event/sysmon_win_reg_telemetry_persistence.yml
+++ b/rules/windows/registry_event/sysmon_win_reg_telemetry_persistence.yml
@@ -8,6 +8,7 @@ references:
 author: Lednyov Alexey, oscd.community
 tags:
     - attack.persistence
+    - attack.t1053.005
 logsource:
     category: registry_event
     product: windows