diff --git a/rules/windows/process_creation/proc_creation_win_wmic_uninstall_application.yml b/rules/windows/process_creation/proc_creation_win_wmic_uninstall_application.yml index a3c05a97e..1af7fdd54 100644 --- a/rules/windows/process_creation/proc_creation_win_wmic_uninstall_application.yml +++ b/rules/windows/process_creation/proc_creation_win_wmic_uninstall_application.yml @@ -2,7 +2,7 @@ title: Application Removed Via Wmic.EXE id: b53317a0-8acf-4fd1-8de8-a5401e776b96 related: - id: 847d5ff3-8a31-4737-a970-aeae8fe21765 # Uninstall Security Products - tpye: derived + type: derived status: experimental description: Uninstall an application with wmic references: