From edf3e3f3a210a4dcf14ed449ce5f63e4e53e3b43 Mon Sep 17 00:00:00 2001 From: RenaudFrere <90250126+RenaudFrere@users.noreply.github.com> Date: Fri, 4 Aug 2023 16:31:00 +0200 Subject: [PATCH] Update proc_creation_win_susp_service_tamper.yml --- .../process_creation/proc_creation_win_susp_service_tamper.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/windows/process_creation/proc_creation_win_susp_service_tamper.yml b/rules/windows/process_creation/proc_creation_win_susp_service_tamper.yml index 6a613adeb..f5a448234 100644 --- a/rules/windows/process_creation/proc_creation_win_susp_service_tamper.yml +++ b/rules/windows/process_creation/proc_creation_win_susp_service_tamper.yml @@ -221,7 +221,7 @@ detection: - 'UI0Detect' - 'UTODetect' - 'Veeam' - - 'VeemaDep/oySvc' + - 'VeemaDeploySvc' - 'Veritas System Recovery' - 'VSApiNt' - 'VSS'