From 1f1cac10ebdfcda89f2c88957da7587d79e240d4 Mon Sep 17 00:00:00 2001
From: david-syk <128359288+david-syk@users.noreply.github.com>
Date: Thu, 17 Apr 2025 00:40:41 +0200
Subject: [PATCH] Merge PR #5258 from @david-syk - Update `Potential Adplus.EXE
 Abuse` tags

chore: update mitre attack tag

---------

Co-authored-by: frack113 <62423083+frack113@users.noreply.github.com>
---
 .../process_creation/proc_creation_win_adplus_memory_dump.yml    | 1 +
 1 file changed, 1 insertion(+)

diff --git a/rules/windows/process_creation/proc_creation_win_adplus_memory_dump.yml b/rules/windows/process_creation/proc_creation_win_adplus_memory_dump.yml
index 6111dab76..5f21e01d0 100644
--- a/rules/windows/process_creation/proc_creation_win_adplus_memory_dump.yml
+++ b/rules/windows/process_creation/proc_creation_win_adplus_memory_dump.yml
@@ -12,6 +12,7 @@ modified: 2023-06-23
 tags:
     - attack.defense-evasion
     - attack.execution
+    - attack.credential-access
     - attack.t1003.001
 logsource:
     category: process_creation