From 87600161bfcf4ece8b117774a2d5b401d37b91eb Mon Sep 17 00:00:00 2001 From: Paul Hager <28906717+pH-T@users.noreply.github.com> Date: Tue, 15 Mar 2022 16:39:12 +0100 Subject: [PATCH] new rule from thedfirreport.com --- .../process_creation/proc_creation_win_schtasks_reg_loader.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/rules/windows/process_creation/proc_creation_win_schtasks_reg_loader.yml b/rules/windows/process_creation/proc_creation_win_schtasks_reg_loader.yml index 5ee6cc5b6..137c87fb9 100644 --- a/rules/windows/process_creation/proc_creation_win_schtasks_reg_loader.yml +++ b/rules/windows/process_creation/proc_creation_win_schtasks_reg_loader.yml @@ -33,4 +33,3 @@ tags: - attack.persistence - attack.t1053.005 - attack.t1059.001 - \ No newline at end of file