From ef0aae28be75b82f73c43b1a46582801492ebdcd Mon Sep 17 00:00:00 2001 From: Wagga <6437862+wagga40@users.noreply.github.com> Date: Mon, 29 Aug 2022 07:43:02 +0200 Subject: [PATCH] Update posh_ps_set_policies_to_unsecure_level.yml --- .../posh_ps_set_policies_to_unsecure_level.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/rules/windows/powershell/powershell_script/posh_ps_set_policies_to_unsecure_level.yml b/rules/windows/powershell/powershell_script/posh_ps_set_policies_to_unsecure_level.yml index cfbe4209f..90dafd992 100644 --- a/rules/windows/powershell/powershell_script/posh_ps_set_policies_to_unsecure_level.yml +++ b/rules/windows/powershell/powershell_script/posh_ps_set_policies_to_unsecure_level.yml @@ -1,6 +1,6 @@ -title: Change PowerShell Policies to an Unsecure Level +title: Change PowerShell Policies to an Insecure Level id: 61d0475c-173f-4844-86f7-f3eebae1c66b -description: Detects use of Set-ExecutionPolicy to set a unsecure policies +description: Detects use of Set-ExecutionPolicy to set insecure policies status: experimental references: - https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.security/set-executionpolicy?view=powershell-7.1 @@ -33,4 +33,4 @@ detection: condition: cmdlet and option and not filter falsepositives: - Administrator script -level: medium \ No newline at end of file +level: medium