From 27bbbf3398df4d9cbedd8fb812df7880d564e2a9 Mon Sep 17 00:00:00 2001 From: "unclep@sk" Date: Fri, 16 Oct 2020 12:51:59 +0300 Subject: [PATCH] The author field escape char fixed --- .../windows/process_creation/win_susp_use_of_sqltoolsps_bin.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/windows/process_creation/win_susp_use_of_sqltoolsps_bin.yml b/rules/windows/process_creation/win_susp_use_of_sqltoolsps_bin.yml index 9091c9a2e..1f240db80 100644 --- a/rules/windows/process_creation/win_susp_use_of_sqltoolsps_bin.yml +++ b/rules/windows/process_creation/win_susp_use_of_sqltoolsps_bin.yml @@ -10,7 +10,7 @@ tags: - attack.t1059.001 - attack.defense_evasion - attack.t1127 -author: 'Agro (@agro_sev)' oscd.community +author: 'Agro (@agro_sev) oscd.communitly' date: 2020/10/13 logsource: category: process_creation