security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Generated guid

Browse Source
This commit is contained in:
stvetro
2020-10-09 15:42:05 +04:00
parent f6ce48a1be
commit 500fcfbcbe
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/process_creation/win_susp_runscripthelper.yml
+1 -1
View File
@@ -1,5 +1,5 @@
title: Suspicious use of Runscripthelper.exe
id: 06b401f4-107c-4ff9-947f-9ec1e7649f1e
id: eca49c87-8a75-4f13-9c73-a5a29e845f03
status: experimental
description: Detects execution of powershell scripts via Runscripthelper.exe
references: