Update proc_creation_win_inline_base64_mz_header.yml
This commit is contained in:
@@ -19,7 +19,7 @@ detection:
|
||||
- 'TVpTAQEAAAAEAAAA'
|
||||
condition: selection
|
||||
falsepositives:
|
||||
- Unlikley
|
||||
- Unlikely
|
||||
level: high
|
||||
tags:
|
||||
- attack.execution
|
||||
|
||||
Reference in New Issue
Block a user