From b49633d32b3cfe9f3537b3508436385a10e59a83 Mon Sep 17 00:00:00 2001 From: jbies121 <15245768+jbies121@users.noreply.github.com> Date: Mon, 16 May 2022 21:57:30 -0500 Subject: [PATCH] #2902: Remove t1547.006 --- ...s_creation_lolbins_suspicious_driver_installed_by_pnputil.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/rules/windows/process_creation/process_creation_lolbins_suspicious_driver_installed_by_pnputil.yml b/rules/windows/process_creation/process_creation_lolbins_suspicious_driver_installed_by_pnputil.yml index 67dc8ab32..1c81febee 100644 --- a/rules/windows/process_creation/process_creation_lolbins_suspicious_driver_installed_by_pnputil.yml +++ b/rules/windows/process_creation/process_creation_lolbins_suspicious_driver_installed_by_pnputil.yml @@ -10,7 +10,6 @@ references: tags: - attack.persistence - attack.t1547 - - attack.t1547.006 logsource: category: process_creation product: windows