Fixed date format in rule

2022-03-15 23:31:14 +01:00
parent 801ccef8b3
commit f022b087e0
1 changed files with 3 additions and 3 deletions
@@ -4,7 +4,7 @@ description: Monitors for the hiding possible malicious files in the C:\Windows\
 status: experimental
 references:
    - https://thedfirreport.com/2020/04/20/sqlserver-or-the-miner-in-the-basement/
-date: 2020/21/04
+date: 2020/04/21
 modified: 2022/03/08
 author: Sreeman
 logsource:
@@ -12,13 +12,13 @@ logsource:
    category: process_creation
 detection:
    selection_1:
-        CommandLine|contains: 
+        CommandLine|contains:
            - 'echo'
            - 'copy'
            - 'type'
            - 'file createnew'
            - 'cacls'
-    selection_2:    
+    selection_2:
        CommandLine|contains: 'C:\Windows\Fonts\'
    selection_3:
        CommandLine|contains: