Update proc_creation_win_susp_cmd_exectution_via_wmi.yml

2023-01-20 06:45:38 +01:00
parent 1a9efa1002
commit b04efe8d6f
1 changed files with 1 additions and 0 deletions
@@ -6,6 +6,7 @@ references:
    - https://www.elastic.co/guide/en/security/current/suspicious-cmd-execution-via-wmi.html
 author: Tim Rauch
 date: 2022/09/27
+modified: 2023/01/19
 tags:
    - attack.execution
    - attack.t1047