From 2580b84de33dff05a012732c2fbc5ad137fcbb10 Mon Sep 17 00:00:00 2001 From: Florian Roth Date: Wed, 21 Dec 2022 00:07:51 +0100 Subject: [PATCH] fix: typo --- .../registry_set/registry_set_globalflags_persistence.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/windows/registry/registry_set/registry_set_globalflags_persistence.yml b/rules/windows/registry/registry_set/registry_set_globalflags_persistence.yml index ef3e0c318..ac9afd353 100755 --- a/rules/windows/registry/registry_set/registry_set_globalflags_persistence.yml +++ b/rules/windows/registry/registry_set/registry_set_globalflags_persistence.yml @@ -4,7 +4,7 @@ related: - id: c81fe886-cac0-4913-a511-2822d72ff505 type: obsoletes status: test -description: Detects regisrry persistence technique using the GlobalFlags and SilentProcessExit keys +description: Detects registry persistence technique using the GlobalFlags and SilentProcessExit keys references: - https://oddvar.moe/2018/04/10/persistence-using-globalflags-in-image-file-execution-options-hidden-from-autoruns-exe/ - https://www.deepinstinct.com/2021/02/16/lsass-memory-dumps-are-stealthier-than-ever-before-part-2/