From d1fcf96d7dec10b4f2e8e5b5d11a9145a333bb4b Mon Sep 17 00:00:00 2001 From: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com> Date: Tue, 3 Jan 2023 17:47:15 +0100 Subject: [PATCH] fix: update modified field --- .../powershell_script/posh_ps_susp_invocation_generic.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/windows/powershell/powershell_script/posh_ps_susp_invocation_generic.yml b/rules/windows/powershell/powershell_script/posh_ps_susp_invocation_generic.yml index 0f3a397cb..d851cfdca 100644 --- a/rules/windows/powershell/powershell_script/posh_ps_susp_invocation_generic.yml +++ b/rules/windows/powershell/powershell_script/posh_ps_susp_invocation_generic.yml @@ -7,7 +7,7 @@ status: test description: Detects suspicious PowerShell invocation command parameters author: Florian Roth (rule) date: 2017/03/12 -modified: 2022/12/25 +modified: 2023/01/03 tags: - attack.execution - attack.t1059.001