From 2b78d921c4660b7bf8457e80af4a67dfd2db36c1 Mon Sep 17 00:00:00 2001 From: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com> Date: Thu, 20 Oct 2022 12:41:23 +0200 Subject: [PATCH] Update proc_creation_win_hack_rubeus.yml --- rules/windows/process_creation/proc_creation_win_hack_rubeus.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/rules/windows/process_creation/proc_creation_win_hack_rubeus.yml b/rules/windows/process_creation/proc_creation_win_hack_rubeus.yml index 3141d3079..290ec5b68 100644 --- a/rules/windows/process_creation/proc_creation_win_hack_rubeus.yml +++ b/rules/windows/process_creation/proc_creation_win_hack_rubeus.yml @@ -33,7 +33,6 @@ detection: - ' hash /password:' - ' golden /aes256:' - ' silver /user:' - - ' silver /user:' condition: selection falsepositives: - Unlikely