From eeca6a898b641c25af40cbcef1f8aaaf9ff3dabe Mon Sep 17 00:00:00 2001
From: Florian Roth <venom14@gmail.com>
Date: Wed, 21 Sep 2022 18:16:02 +0200
Subject: [PATCH] fix: mitre attack tags

---
 .../process_creation/proc_creation_win_hack_sharpersist.yml     | 2 --
 1 file changed, 2 deletions(-)

diff --git a/rules/windows/process_creation/proc_creation_win_hack_sharpersist.yml b/rules/windows/process_creation/proc_creation_win_hack_sharpersist.yml
index 06ed87af5..51ca980d6 100644
--- a/rules/windows/process_creation/proc_creation_win_hack_sharpersist.yml
+++ b/rules/windows/process_creation/proc_creation_win_hack_sharpersist.yml
@@ -13,8 +13,6 @@ logsource:
 tags:
    - attack.persistence
    - attack.t1053
-   - attack.t1060
-   - attack.t1050
 detection:
    selection1:
       Image|endswith: '\SharPersist.exe'