From e533b4effb8b286e21e6c574b42b858d6bcbed4e Mon Sep 17 00:00:00 2001 From: Florian Roth Date: Thu, 28 Jan 2021 13:51:51 +0100 Subject: [PATCH] fix: tags --- rules/windows/process_creation/win_susp_volsnap_disable.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/rules/windows/process_creation/win_susp_volsnap_disable.yml b/rules/windows/process_creation/win_susp_volsnap_disable.yml index f82e01ade..416b8f301 100644 --- a/rules/windows/process_creation/win_susp_volsnap_disable.yml +++ b/rules/windows/process_creation/win_susp_volsnap_disable.yml @@ -8,8 +8,7 @@ status: experimental author: Florian Roth tags: - attack.defense_evasion - - attack.t1562.004 - - attack.s0108 + - attack.t1562.001 logsource: category: process_creation product: windows