security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add definition info

Browse Source
This commit is contained in:
frack113
2021-11-30 15:10:36 +01:00
parent 5c1b3f8362
commit 24d73a5f8a
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/builtin/win_usb_device_plugged.yml
+1 -1
View File
@@ -11,7 +11,7 @@ modified: 2021/11/30
logsource:
product: windows
service: driver-framework
definition: mapping Provider_Name: 'Microsoft-Windows-DriverFrameworks-UserMode/Operational'
definition: mapping Provider_Name 'Microsoft-Windows-DriverFrameworks-UserMode/Operational'
detection:
selection:
EventID: