diff --git a/rules/windows/process_creation/win_non_priv_reg_or_ps.yml b/rules/windows/process_creation/win_non_priv_reg_or_ps.yml index 9416dcd66..49c647148 100644 --- a/rules/windows/process_creation/win_non_priv_reg_or_ps.yml +++ b/rules/windows/process_creation/win_non_priv_reg_or_ps.yml @@ -1,4 +1,4 @@ -title: Non-privileged Usage of reg or Powershell +title: Non-privileged Usage of Reg or Powershell id: 8f02c935-effe-45b3-8fc9-ef8696a9e41d description: Search for usage of reg or Powershell by non-priveleged users to modify service configuration in registry status: experimental