security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #334 from Codehardt/master

Browse Source 
fix: fixed reference list, otherwise it's not valid string list
This commit is contained in:
Thomas Patzke
2019-05-10 10:19:56 +02:00
committed by GitHub
parent 526468bec3 6585c83077
commit 1c2bc87946
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/process_creation/win_office_spawn_exe_from_users_directory.yml
+1 -1
View File
@@ -2,7 +2,7 @@ title: MS Office Product Spawning Exe in User Dir
status: experimental
description: Detects an executable in the users directory started from Microsoft Word, Excel, Powerpoint, Publisher or Visio
references:
- sha256: 23160972c6ae07f740800fa28e421a81d7c0ca5d5cab95bc082b4a986fbac57c
- sha256=23160972c6ae07f740800fa28e421a81d7c0ca5d5cab95bc082b4a986fbac57c
- https://blog.morphisec.com/fin7-not-finished-morphisec-spots-new-campaign
tags:
- attack.execution