security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update mal_azorult_reg.yml

Browse Source
This commit is contained in:
Jonhnathan
2020-10-27 22:07:45 -03:00
committed by GitHub
parent ebb84486f5
commit 9fd203e2a3
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/malware/mal_azorult_reg.yml
+1 -1
View File
@@ -17,7 +17,7 @@ detection:
EventID:
- 12
- 13
TargetObject|startswith:
TargetObject|endswith:
- 'SYSTEM\\*\services\localNETService'
condition: selection
fields: