security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

mend

Browse Source 
removed system_integrity
This commit is contained in:
swachchhanda
2023-04-20 17:31:26 +05:45
parent b3f97c676d
commit 9504a5a7a7
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/process_creation/proc_creation_win_schtasks_schedule_via_masqueraded_xml_file.yml
+1 -2
View File
@@ -32,8 +32,7 @@ detection:
CommandLine|contains:
- '.xml'
filter_2:
system_integrity:
IntegrityLevel: 'System'
IntegrityLevel: 'System'
filter_3:
ParentImage|contains:
- ':\ProgramData\OEM\UpgradeTool\CareCenter_*\BUnzip\Setup_msi.exe'