diff --git a/rules/windows/process_creation/proc_creation_win_sqlite_firefox_cookies.yml b/rules/windows/process_creation/proc_creation_win_sqlite_firefox_cookies.yml index 7a50d67f2..54f46933a 100644 --- a/rules/windows/process_creation/proc_creation_win_sqlite_firefox_cookies.yml +++ b/rules/windows/process_creation/proc_creation_win_sqlite_firefox_cookies.yml @@ -1,4 +1,4 @@ -title: SQLite Firefox Cookie Access +title: SQLite Firefox Cookie DB Access id: 4833155a-4053-4c9c-a997-777fcea0baa7 status: experimental description: Detect use of sqlite binary to query the Firefox cookies.sqlite database and steal the cookie data contained within it