security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #1583 from Karneades/Karneades-patch-1

Browse Source 
Add Synergy as possible FP for PortProxy key
This commit is contained in:
Florian Roth
2021-06-28 13:52:05 +02:00
committed by GitHub
parent f4ac416ef4 756b8eed26
commit b02741cfe0
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/registry_event/win_portproxy_registry_key.yml
+1
View File
@@ -22,4 +22,5 @@ detection:
condition: selection_registry
falsepositives:
- WSL2 network bridge PowerShell script used for WSL/Kubernetes/Docker (e.g. https://github.com/microsoft/WSL/issues/4150#issuecomment-504209723)
- Synergy Software KVM (https://symless.com/synergy)
level: medium