security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix titles

Browse Source
This commit is contained in:
uchakin
2020-10-07 22:27:48 +03:00
parent b568e14b03
commit a73dbd0a5d
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/image_load/sysmon_uac_bypass_via_dism.yml
+1 -1
View File
@@ -1,4 +1,4 @@
title: UAC bypass with fake dll
title: UAC Bypass With Fake DLL
id: a5ea83a7-05a5-44c1-be2e-addccbbd8c03
status: experimental
description: Attempts to load dismcore.dll after dropping it.
rules/windows/process_access/sysmon_load_undocumented_autoelevated_com_interface.yml
+1 -1
View File
@@ -1,4 +1,4 @@
title: load undocumented autoelevated com interface
title: Load Undocumented Autoelevated COM Interface
id: fb3722e4-1a06-46b6-b772-253e2e7db933
status: experimental
description: COM interface (EditionUpgradeManager) that is not used by standard executables.
rules/windows/registry_event/sysmon_bypass_via_wsreset.yml
+1 -1
View File
@@ -1,4 +1,4 @@
title: UAC bypass via wsreset
title: UAC Bypass Via Wsreset
id: 6ea3bf32-9680-422d-9f50-e90716b12a66
status: experimental
description: Unfixed method for UAC bypass from windows 10. WSReset.exe file associated with the Windows Store. It will run a binary file contained in a low-privilege registry.