From f81475944613bc2b42cc5a85facd473ac4a62464 Mon Sep 17 00:00:00 2001 From: frack113 Date: Tue, 16 Aug 2022 22:09:11 +0200 Subject: [PATCH] Move placeholder rules --- .../windows/builtin/security/win_pass_the_hash.yml | 0 .../windows/builtin/security/win_privesc_cve_2020_1472.yml | 0 .../security/win_remote_registry_management_using_reg_utility.yml | 0 .../windows/builtin/security/win_susp_interactive_logons.yml | 0 4 files changed, 0 insertions(+), 0 deletions(-) rename {rules => rules-placeholder}/windows/builtin/security/win_pass_the_hash.yml (100%) rename {rules => rules-placeholder}/windows/builtin/security/win_privesc_cve_2020_1472.yml (100%) rename {rules => rules-placeholder}/windows/builtin/security/win_remote_registry_management_using_reg_utility.yml (100%) rename {rules => rules-placeholder}/windows/builtin/security/win_susp_interactive_logons.yml (100%) diff --git a/rules/windows/builtin/security/win_pass_the_hash.yml b/rules-placeholder/windows/builtin/security/win_pass_the_hash.yml similarity index 100% rename from rules/windows/builtin/security/win_pass_the_hash.yml rename to rules-placeholder/windows/builtin/security/win_pass_the_hash.yml diff --git a/rules/windows/builtin/security/win_privesc_cve_2020_1472.yml b/rules-placeholder/windows/builtin/security/win_privesc_cve_2020_1472.yml similarity index 100% rename from rules/windows/builtin/security/win_privesc_cve_2020_1472.yml rename to rules-placeholder/windows/builtin/security/win_privesc_cve_2020_1472.yml diff --git a/rules/windows/builtin/security/win_remote_registry_management_using_reg_utility.yml b/rules-placeholder/windows/builtin/security/win_remote_registry_management_using_reg_utility.yml similarity index 100% rename from rules/windows/builtin/security/win_remote_registry_management_using_reg_utility.yml rename to rules-placeholder/windows/builtin/security/win_remote_registry_management_using_reg_utility.yml diff --git a/rules/windows/builtin/security/win_susp_interactive_logons.yml b/rules-placeholder/windows/builtin/security/win_susp_interactive_logons.yml similarity index 100% rename from rules/windows/builtin/security/win_susp_interactive_logons.yml rename to rules-placeholder/windows/builtin/security/win_susp_interactive_logons.yml