Update registry_set_add_hidden_user.yml
This commit is contained in:
@@ -1,4 +1,4 @@
|
||||
title: Creation of a Hidden User Account by Registry
|
||||
title: User account hidden by the registry
|
||||
id: 8a58209c-7ae6-4027-afb0-307a78e4589a
|
||||
description: Detect modification for a specific user to prevent that user from being listed on the logon screen
|
||||
status: experimental
|
||||
@@ -21,4 +21,5 @@ falsepositives:
|
||||
level: high
|
||||
tags:
|
||||
- attack.defense_evasion
|
||||
- attack.t1564.002
|
||||
- attack.t1564.002
|
||||
|
||||
|
||||
Reference in New Issue
Block a user