From 950fa18418b104471a0644ee2ebbd6b06dcff8d5 Mon Sep 17 00:00:00 2001 From: Florian Roth Date: Tue, 25 Feb 2020 11:12:47 +0100 Subject: [PATCH] fix: changed titles to avoid duplicates --- .../sysmon/sysmon_alternate_powershell_hosts_moduleload.yml | 2 +- rules/windows/sysmon/sysmon_alternate_powershell_hosts_pipe.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/windows/sysmon/sysmon_alternate_powershell_hosts_moduleload.yml b/rules/windows/sysmon/sysmon_alternate_powershell_hosts_moduleload.yml index a9b4243fa..5a1abf5ee 100644 --- a/rules/windows/sysmon/sysmon_alternate_powershell_hosts_moduleload.yml +++ b/rules/windows/sysmon/sysmon_alternate_powershell_hosts_moduleload.yml @@ -1,4 +1,4 @@ -title: Alternate PowerShell Hosts +title: Alternate PowerShell Hosts Module Load id: f67f6c57-257d-4919-a416-69cd31f9aac3 description: Detects alternate PowerShell hosts potentially bypassing detections looking for powershell.exe status: experimental diff --git a/rules/windows/sysmon/sysmon_alternate_powershell_hosts_pipe.yml b/rules/windows/sysmon/sysmon_alternate_powershell_hosts_pipe.yml index b96fcf271..fb702e8a2 100644 --- a/rules/windows/sysmon/sysmon_alternate_powershell_hosts_pipe.yml +++ b/rules/windows/sysmon/sysmon_alternate_powershell_hosts_pipe.yml @@ -1,4 +1,4 @@ -title: Alternate PowerShell Hosts +title: Alternate PowerShell Hosts Pipe id: 58cb02d5-78ce-4692-b3e1-dce850aae41a description: Detects alternate PowerShell hosts potentially bypassing detections looking for powershell.exe status: experimental