From a5cfb87ee10efc3524eedb3de970eab89a2731ac Mon Sep 17 00:00:00 2001 From: Florian Roth Date: Thu, 17 Mar 2022 20:22:11 +0100 Subject: [PATCH] Update posh_ps_as_rep_roasting.yml --- .../powershell/powershell_script/posh_ps_as_rep_roasting.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/windows/powershell/powershell_script/posh_ps_as_rep_roasting.yml b/rules/windows/powershell/powershell_script/posh_ps_as_rep_roasting.yml index 949f63964..f76e0c978 100644 --- a/rules/windows/powershell/powershell_script/posh_ps_as_rep_roasting.yml +++ b/rules/windows/powershell/powershell_script/posh_ps_as_rep_roasting.yml @@ -1,7 +1,7 @@ title: Get-ADUser Enumeration Using UserAccountControl Flags id: 96c982fe-3d08-4df4-bed2-eb14e02f21c8 status: experimental -description: AS-REP roasting is an attack that is often-overlooked in my opinion it is not extremely common as you have to explicitly set Accounts Does not Require Pre-Authentication +description: Detects AS-REP roasting is an attack that is often-overlooked. It is not very common as you have to explicitly set accounts that do not require pre-authentication. date: 2022/03/17 author: frack113 references: