From 80eaedab8b4affe369ee1c077c75b82db2d36601 Mon Sep 17 00:00:00 2001 From: Thomas Patzke Date: Tue, 7 Aug 2018 08:22:11 +0200 Subject: [PATCH] Fixed tag and date --- rules/windows/sysmon/sysmon_sdbinst_shim_persistence.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/windows/sysmon/sysmon_sdbinst_shim_persistence.yml b/rules/windows/sysmon/sysmon_sdbinst_shim_persistence.yml index fe216e591..cea5c5ba8 100644 --- a/rules/windows/sysmon/sysmon_sdbinst_shim_persistence.yml +++ b/rules/windows/sysmon/sysmon_sdbinst_shim_persistence.yml @@ -5,9 +5,9 @@ references: - https://www.fireeye.com/blog/threat-research/2017/05/fin7-shim-databases-persistence.html tags: - attack.persistence - - attack.T1138 + - attack.t1138 author: Markus Neis -date: 2018/03/08 +date: 2018-08-03 logsource: product: windows service: sysmon