diff --git a/rules/windows/process_creation/proc_creation_win_susp_service_tamper.yml b/rules/windows/process_creation/proc_creation_win_susp_service_tamper.yml index 6a613adeb..f5a448234 100644 --- a/rules/windows/process_creation/proc_creation_win_susp_service_tamper.yml +++ b/rules/windows/process_creation/proc_creation_win_susp_service_tamper.yml @@ -221,7 +221,7 @@ detection: - 'UI0Detect' - 'UTODetect' - 'Veeam' - - 'VeemaDep/oySvc' + - 'VeemaDeploySvc' - 'Veritas System Recovery' - 'VSApiNt' - 'VSS'