security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #2562 from SimoneCagol/patch-1

Browse Source 
Update sysmon_raw_disk_access_using_illegitimate_tools.yml
This commit is contained in:
frack113
2022-01-14 16:51:54 +01:00
committed by GitHub
parent 8608ce6396 2c964503e9
commit a2ceddcd65
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/raw_access_thread/sysmon_raw_disk_access_using_illegitimate_tools.yml
+1 -1
View File
@@ -4,7 +4,7 @@ description: Raw disk access using illegitimate tools, possible defence evasion
author: Teymur Kheirkhabarov, oscd.community
status: test
date: 2019/10/22
modified: 2022/02/02
modified: 2022/01/02
references:
- https://www.slideshare.net/heirhabarov/hunting-for-credentials-dumping-in-windows-environment
tags: