From 2f0bce02ead1cb5938ee5a8bb90741c31391e105 Mon Sep 17 00:00:00 2001 From: Florian Roth Date: Sat, 9 Apr 2022 20:01:54 +0200 Subject: [PATCH] Update proc_creation_win_sqlite_firefox_cookies.yml --- .../proc_creation_win_sqlite_firefox_cookies.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/windows/process_creation/proc_creation_win_sqlite_firefox_cookies.yml b/rules/windows/process_creation/proc_creation_win_sqlite_firefox_cookies.yml index 7a50d67f2..54f46933a 100644 --- a/rules/windows/process_creation/proc_creation_win_sqlite_firefox_cookies.yml +++ b/rules/windows/process_creation/proc_creation_win_sqlite_firefox_cookies.yml @@ -1,4 +1,4 @@ -title: SQLite Firefox Cookie Access +title: SQLite Firefox Cookie DB Access id: 4833155a-4053-4c9c-a997-777fcea0baa7 status: experimental description: Detect use of sqlite binary to query the Firefox cookies.sqlite database and steal the cookie data contained within it