diff --git a/rules/windows/builtin/smbclient/win_susp_failed_admin_share_mount.yml b/rules/windows/builtin/smbclient/win_susp_failed_admin_share_mount.yml index 6d6470981..2fbc5497e 100644 --- a/rules/windows/builtin/smbclient/win_susp_failed_admin_share_mount.yml +++ b/rules/windows/builtin/smbclient/win_susp_failed_admin_share_mount.yml @@ -25,4 +25,4 @@ falsepositives: - Faulty scripts tags: - attack.t1021.002 - - attack.lateral_movement \ No newline at end of file + - attack.lateral_movement