Fixed identifier
This commit is contained in:
@@ -10,7 +10,7 @@ logsource:
|
||||
product: windows
|
||||
service: security
|
||||
detection:
|
||||
selection_one:
|
||||
selection:
|
||||
EventID: 4662
|
||||
ObjectServer: 'DS'
|
||||
AccessMask: 0x40000
|
||||
@@ -20,4 +20,4 @@ detection:
|
||||
condition: selection
|
||||
falsepositives:
|
||||
- Unknown
|
||||
level: critical
|
||||
level: critical
|
||||
|
||||
Reference in New Issue
Block a user