Rule: extended LockerGoga description

2019-03-22 11:03:48 +01:00
parent 1adb040e0b
commit ffac77fb37
1 changed files with 2 additions and 1 deletions
@@ -1,5 +1,5 @@
 title: LockerGoga Ransomware
-description: Detects LockaerGoga ransomware
+description: Detects a command that clears the WMI trace log which indicates LockaerGoga ransomware activity
 references:
    - https://abuse.io/lockergoga.txt
 author: Florian Roth
@@ -15,3 +15,4 @@ detection:
    selection:
        CommandLine: '* cl Microsoft-Windows-WMI-Activity/Trace'
    condition: selection
+