From ae317652f7e1a3245dcfd99f2bc667b0dd969d53 Mon Sep 17 00:00:00 2001
From: WojciechLesicki <wojciech.lesicki@gmail.com>
Date: Tue, 29 Jun 2021 11:02:55 +0200
Subject: [PATCH] Back to upstream version.

---
 rules/windows/builtin/win_cobaltstrike_service_installs.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rules/windows/builtin/win_cobaltstrike_service_installs.yml b/rules/windows/builtin/win_cobaltstrike_service_installs.yml
index 7d8813abc..9834aee86 100644
--- a/rules/windows/builtin/win_cobaltstrike_service_installs.yml
+++ b/rules/windows/builtin/win_cobaltstrike_service_installs.yml
@@ -5,7 +5,7 @@ author: Florian Roth, Wojciech Lesicki
 references:
     - https://www.sans.org/webcasts/119395
 date: 2021/05/26
-modified: 2021/06/20
+modified: 2021/06/03
 tags:
     - attack.execution
     - attack.privilege_escalation