diff --git a/rules/windows/process_creation/win_rdp_hijack_shadowing.yml b/rules/windows/process_creation/win_rdp_hijack_shadowing.yml index f08c5f3f2..9285babdd 100644 --- a/rules/windows/process_creation/win_rdp_hijack_shadowing.yml +++ b/rules/windows/process_creation/win_rdp_hijack_shadowing.yml @@ -1,7 +1,7 @@ title: MSTSC Shadowing id: 6ba5a05f-b095-4f0a-8654-b825f4f16334 -status: Detects RDP session hijacking by using MSTSC shadowing -description: +description: Detects RDP session hijacking by using MSTSC shadowing +status: experimental author: Florian Roth date: 2020/01/24 references: