Merge PR #4458 from @Mladia - Update Coverage

update: Linux Network Service Scanning - Auditd - Update coverage to add `ncat` and `nc.openbsd` --------- Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>
2023-09-27 10:27:45 +02:00
parent 78f323742f
commit a3f39d8fb6
1 changed files with 3 additions and 1 deletions
@@ -9,7 +9,7 @@ references:
    - https://github.com/redcanaryco/atomic-red-team/blob/f339e7da7d05f6057fdfcdd3742bfcf365fee2a9/atomics/T1046/T1046.md
 author: Alejandro Ortuno, oscd.community
 date: 2020/10/21
-modified: 2022/11/26
+modified: 2023/09/26
 tags:
    - attack.discovery
    - attack.t1046
@@ -25,6 +25,8 @@ detection:
            - '/nmap'
            - '/netcat'
            - '/nc'
+            - '/ncat'
+            - '/nc.openbsd'
        key: 'network_connect_4'
    condition: selection
 falsepositives: