diff --git a/rules/windows/powershell/powershell_script/posh_ps_set_policies_to_unsecure_level.yml b/rules/windows/powershell/powershell_script/posh_ps_set_policies_to_unsecure_level.yml index cfbe4209f..90dafd992 100644 --- a/rules/windows/powershell/powershell_script/posh_ps_set_policies_to_unsecure_level.yml +++ b/rules/windows/powershell/powershell_script/posh_ps_set_policies_to_unsecure_level.yml @@ -1,6 +1,6 @@ -title: Change PowerShell Policies to an Unsecure Level +title: Change PowerShell Policies to an Insecure Level id: 61d0475c-173f-4844-86f7-f3eebae1c66b -description: Detects use of Set-ExecutionPolicy to set a unsecure policies +description: Detects use of Set-ExecutionPolicy to set insecure policies status: experimental references: - https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.security/set-executionpolicy?view=powershell-7.1 @@ -33,4 +33,4 @@ detection: condition: cmdlet and option and not filter falsepositives: - Administrator script -level: medium \ No newline at end of file +level: medium