add temp folder

2021-10-30 17:28:07 +02:00
parent 8b86a79ef0
commit eba2f3b68f
1 changed files with 2 additions and 1 deletions
@@ -10,7 +10,7 @@ tags:
    - attack.t1060 # an old one
    - attack.t1547.001
 date: 2018/08/25
-modified: 2020/09/06
+modified: 2021/10/30
 logsource:
    category: registry_event
    product: windows
@@ -27,6 +27,7 @@ detection:
            - 'C:\Users\Public\'
            - 'C:\Users\Default\'
            - 'C:\Users\Desktop\'
+            - '\AppData\Local\Temp\'
        - Details|startswith:
            - '%Public%\'
            - 'wscript'