Update registry_set_add_hidden_user.yml

This commit is contained in:
frack113
2022-08-21 07:39:17 +02:00
committed by GitHub
parent 247edbf967
commit 57e131fe4e
@@ -1,4 +1,4 @@
title: Creation of a Hidden User Account by Registry
title: User account hidden by the registry
id: 8a58209c-7ae6-4027-afb0-307a78e4589a
description: Detect modification for a specific user to prevent that user from being listed on the logon screen
status: experimental
@@ -21,4 +21,5 @@ falsepositives:
level: high
tags:
- attack.defense_evasion
- attack.t1564.002
- attack.t1564.002