Update posh_ps_set_policies_to_unsecure_level.yml
This commit is contained in:
+3
-3
@@ -1,6 +1,6 @@
|
||||
title: Change PowerShell Policies to an Unsecure Level
|
||||
title: Change PowerShell Policies to an Insecure Level
|
||||
id: 61d0475c-173f-4844-86f7-f3eebae1c66b
|
||||
description: Detects use of Set-ExecutionPolicy to set a unsecure policies
|
||||
description: Detects use of Set-ExecutionPolicy to set insecure policies
|
||||
status: experimental
|
||||
references:
|
||||
- https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.security/set-executionpolicy?view=powershell-7.1
|
||||
@@ -33,4 +33,4 @@ detection:
|
||||
condition: cmdlet and option and not filter
|
||||
falsepositives:
|
||||
- Administrator script
|
||||
level: medium
|
||||
level: medium
|
||||
|
||||
Reference in New Issue
Block a user