Fixed the taxonomy
This commit is contained in:
@@ -13,12 +13,12 @@ logsource:
|
||||
service: x509
|
||||
detection:
|
||||
selection:
|
||||
certificate_serial: 8bb00ee
|
||||
certificate.serial: 8bb00ee
|
||||
condition: selection
|
||||
fields:
|
||||
- san_dns
|
||||
- certificate_subject
|
||||
- certificate_issuer
|
||||
- san.dns
|
||||
- certificate.subject
|
||||
- certificate.issuer
|
||||
falsepositives:
|
||||
- none
|
||||
level: high
|
||||
|
||||
Reference in New Issue
Block a user