Update powershell_shellcode_b64.yml logsource to use the correct Sigma schema values

2020-07-11 22:17:06 -04:00
parent 3bb45f00af
commit 25d978d9bd
1 changed files with 1 additions and 1 deletions
@@ -15,7 +15,7 @@ date: 2018/11/17
 logsource:
    product: windows
    service: powershell
-    description: 'Script block logging must be enabled'
+    definition: 'Script block logging must be enabled'
 detection:
    selection:
        EventID: 4104