Update win_susp_winrm_execution.yml
This commit is contained in:
@@ -23,4 +23,5 @@ detection:
|
||||
condition: selection
|
||||
level: medium
|
||||
falsepositives:
|
||||
- Legitimate use for administartive purposes. Unlikely
|
||||
- Legitimate use for administartive purposes. Unlikely
|
||||
|
||||
|
||||
Reference in New Issue
Block a user