From 4b8ffbc183c597e448e8a1a09b7aeddbda3fd406 Mon Sep 17 00:00:00 2001
From: frack113 <magicfrancois@gmail.com>
Date: Wed, 1 Sep 2021 10:30:43 +0200
Subject: [PATCH] Update tags

---
 rules/windows/malware/win_mal_ryuk.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/rules/windows/malware/win_mal_ryuk.yml b/rules/windows/malware/win_mal_ryuk.yml
index 02603871b..156ee19ab 100644
--- a/rules/windows/malware/win_mal_ryuk.yml
+++ b/rules/windows/malware/win_mal_ryuk.yml
@@ -24,3 +24,6 @@ detection:
 falsepositives:
     - Unlikely
 level: critical
+tags:
+    - attack.execution
+    - attack.t1204