security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remove invalid link

Browse Source 
Cybereason link was broken. Couldn't find anything with a super similar file path. The below link might be a valid replacement but went better safe than sorry and just removed it completely. https://www.cybereason.com/hubfs/Cybereason%20Labs%20Analysis%20Operation%20Cobalt%20Kitty-Part1.pdf
This commit is contained in:
megan201296
2019-03-07 14:22:29 -06:00
committed by GitHub
parent a82ea0a022
commit c2a16591af
1 changed files with 0 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/process_creation/win_office_shell.yml
-1
View File
@@ -4,7 +4,6 @@ description: Detects a Windows command line executable started from Microsoft Wo
references:
- https://www.hybrid-analysis.com/sample/465aabe132ccb949e75b8ab9c5bda36d80cf2fd503d52b8bad54e295f28bbc21?environmentId=100
- https://mgreen27.github.io/posts/2018/04/02/DownloadCradle.html
- https://www2.cybereason.com/asset/60:research-cobalt-kitty-attack-lifecycle
tags:
- attack.execution
- attack.defense_evasion