From 37674b944ffca278ff2a3a3fb2edba320c519e16 Mon Sep 17 00:00:00 2001
From: yugoslavskiy <daniil@yugoslavskiy.com>
Date: Tue, 5 Nov 2019 03:04:46 +0300
Subject: [PATCH] Update win_query_registry.yml

---
 rules/windows/process_creation/win_query_registry.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/rules/windows/process_creation/win_query_registry.yml b/rules/windows/process_creation/win_query_registry.yml
index 507fb8a67..193fa70eb 100644
--- a/rules/windows/process_creation/win_query_registry.yml
+++ b/rules/windows/process_creation/win_query_registry.yml
@@ -36,3 +36,4 @@ level: low
 tags:
     - attack.discovery
     - attack.t1012
+    - attack.t1007