diff --git a/rules/windows/builtin/win_susp_ldap_dataexchange.yml b/rules/windows/builtin/win_susp_ldap_dataexchange.yml index c41f0a425..7d1dfca5f 100644 --- a/rules/windows/builtin/win_susp_ldap_dataexchange.yml +++ b/rules/windows/builtin/win_susp_ldap_dataexchange.yml @@ -1,4 +1,4 @@ -title: Suspicious LDAP-Attributes used +title: Suspicious LDAP-Attributes Used id: d00a9a72-2c09-4459-ad03-5e0a23351e36 description: detects the usage of particular AttributeLDAPDisplayNames, which are known for data exchange via LDAP by the tool LDAPFragger and are additionally not commonly used in companies. status: experimental