Update proc_creation_win_renamed_plink.yml

2022-06-07 10:43:23 +02:00
parent 7327dd53e5
commit c7b5eb65b0
1 changed files with 1 additions and 0 deletions
@@ -5,6 +5,7 @@ description: Execution of a renamed version of the Plink binary
 author: Nasreddine Bencherchali
 references:
    - https://thedfirreport.com/2022/06/06/will-the-real-msiexec-please-stand-up-exploit-leads-to-data-exfiltration/
+    - https://the.earth.li/~sgtatham/putty/0.58/htmldoc/Chapter7.html
 date: 2022/06/06
 logsource:
    category: process_creation