From 7269114e5dca621151b7b84df8fe2d25b0760feb Mon Sep 17 00:00:00 2001 From: "uncleP@sk" Date: Thu, 15 Oct 2020 11:52:18 +0300 Subject: [PATCH] The author field escape char added --- rules/windows/process_creation/win_susp_use_of_sqlps_bin.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/windows/process_creation/win_susp_use_of_sqlps_bin.yml b/rules/windows/process_creation/win_susp_use_of_sqlps_bin.yml index 55303d4a7..5590472d5 100644 --- a/rules/windows/process_creation/win_susp_use_of_sqlps_bin.yml +++ b/rules/windows/process_creation/win_susp_use_of_sqlps_bin.yml @@ -11,7 +11,7 @@ tags: - attack.t1059.001 - attack.defense_evasion - attack.t1127 -author: Agro (@agro_sev) oscd.community +author: 'Agro (@agro_sev)' oscd.community date: 2020/10/10 logsource: category: process_creation