From 268a4c31e307d03bb3eb323bdc4890fcfb6027db Mon Sep 17 00:00:00 2001
From: Sittikorn S <61369934+BlackB0lt@users.noreply.github.com>
Date: Tue, 22 Jun 2021 22:00:35 +0700
Subject: [PATCH] Update win_renamed_meg.yml

Change mitre tags T1218.001 to T1218
---
 rules/windows/process_creation/win_renamed_meg.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rules/windows/process_creation/win_renamed_meg.yml b/rules/windows/process_creation/win_renamed_meg.yml
index ff93ab47f..a39dc6874 100644
--- a/rules/windows/process_creation/win_renamed_meg.yml
+++ b/rules/windows/process_creation/win_renamed_meg.yml
@@ -8,7 +8,7 @@ author: Sittikorn S
 date: 2021/06/22
 tags:
     - attack.Defense_Evasion
-    - attack.T1218.001
+    - attack.T1218
 logsource:
     product: windows
     service: sysmon # require sysmon version >= 10.0