From 4fc5bd98aa38088f7c8a266c8a7086aff2eef3e1 Mon Sep 17 00:00:00 2001 From: Yamato Security <71482215+YamatoSecurity@users.noreply.github.com> Date: Fri, 17 Mar 2023 08:47:01 +0900 Subject: [PATCH] update author line --- .../win_security_successful_external_remote_rdp_login.yml | 2 +- .../win_security_successful_external_remote_smb_login.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/windows/builtin/security/win_security_successful_external_remote_rdp_login.yml b/rules/windows/builtin/security/win_security_successful_external_remote_rdp_login.yml index 72250a717..2e038e954 100644 --- a/rules/windows/builtin/security/win_security_successful_external_remote_rdp_login.yml +++ b/rules/windows/builtin/security/win_security_successful_external_remote_rdp_login.yml @@ -8,7 +8,7 @@ description: Detects successful logon from public IP address via RDP. This can i references: - https://www.inversecos.com/2020/04/successful-4624-anonymous-logons-to.html - https://twitter.com/Purp1eW0lf/status/1616144561965002752 -author: Micah Babinski, @micahbabinski, Zach Mathis +author: Micah Babinski (@micahbabinski), Zach Mathis (@yamatosecurity) date: 2023/01/19 modified: 2023/03/16 tags: diff --git a/rules/windows/builtin/security/win_security_successful_external_remote_smb_login.yml b/rules/windows/builtin/security/win_security_successful_external_remote_smb_login.yml index 19e07e8b5..f9d424e5c 100644 --- a/rules/windows/builtin/security/win_security_successful_external_remote_smb_login.yml +++ b/rules/windows/builtin/security/win_security_successful_external_remote_smb_login.yml @@ -8,7 +8,7 @@ description: Detects successful logon from public IP address via SMB. This can i references: - https://www.inversecos.com/2020/04/successful-4624-anonymous-logons-to.html - https://twitter.com/Purp1eW0lf/status/1616144561965002752 -author: Micah Babinski, @micahbabinski, Zach Mathis +author: Micah Babinski (@micahbabinski), Zach Mathis (@yamatosecurity) date: 2023/01/19 modified: 2023/03/16 tags: