Update PS rules

This commit is contained in:
frack113
2021-08-21 09:50:59 +02:00
parent 6c529f7ab2
commit da839775fe
29 changed files with 32 additions and 31 deletions
@@ -14,7 +14,7 @@ tags:
logsource:
product: windows
service: powershell
definition: 'Script block logging must be enabled'
definition: Script block logging must be enabled
detection:
selection:
EventID: 4104