security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

revert comments

Browse Source
This commit is contained in:
Yamato Security
2023-03-18 04:54:43 +09:00
parent f05993bbbe
commit bc8ee0831a
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/builtin/security/win_security_successful_external_remote_rdp_login.yml
+1 -1
View File
@@ -35,7 +35,7 @@ detection:
- IpAddress|startswith:
- 'fe80:' # link-local address
- 'fc' # private address range fc00::/7
- 'fd' # private address range fd00::/8
- 'fd' # private address range fc00::/7
filter_empty:
IpAddress: '-'
condition: selection and not 1 of filter_*
rules/windows/builtin/security/win_security_successful_external_remote_smb_login.yml
+1 -1
View File
@@ -35,7 +35,7 @@ detection:
- IpAddress|startswith:
- 'fe80:' # link-local address
- 'fc' # private address range fc00::/7
- 'fd' # private address range fd00::/8
- 'fd' # private address range fc00::/7
filter_empty:
IpAddress: '-'
condition: selection and not 1 of filter_*