From ca819d87070f291a9072fa409ec3be6e2fda72a5 Mon Sep 17 00:00:00 2001 From: 4A616D6573 Date: Sun, 27 Oct 2019 14:06:52 +1100 Subject: [PATCH] Update win_susp_net_execution.yml Updated tags to pass Travis CI checks. --- rules/windows/process_creation/win_susp_net_execution.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/windows/process_creation/win_susp_net_execution.yml b/rules/windows/process_creation/win_susp_net_execution.yml index ad5fcd6bc..dfa3e7307 100644 --- a/rules/windows/process_creation/win_susp_net_execution.yml +++ b/rules/windows/process_creation/win_susp_net_execution.yml @@ -15,7 +15,7 @@ tags: - attack.t1135 - attack.lateral_movement - attack.discovery - - attack.defense.evasion + - attack.defense_evasion logsource: category: process_creation product: windows