security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update win_susp_service_dacl_modification.yml

Browse Source
This commit is contained in:
Jonhnathan
2020-10-16 11:57:54 -03:00
committed by GitHub
parent 23e956dcce
commit 89bbee6594
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/process_creation/win_susp_service_dacl_modification.yml
+1 -1
View File
@@ -1,7 +1,7 @@
title: Suspicious Service DACL Modification
id: 99cf1e02-00fb-4c0d-8375-563f978dfd37
description: Detects suspicious DACL modifications that can be used to hide services or make them unstopable
author: Jonhnathan Ribeiro
author: Jonhnathan Ribeiro, oscd.community
status: experimental
date: 2020/10/16
references: