security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add CVE to tag (#2127)

Browse Source 
Co-authored-by: Colson Wilhoit <48036388+DefSecSentinel@users.noreply.github.com>
This commit is contained in:
Mika Ayenson
2022-07-22 20:44:14 -04:00
committed by GitHub
parent f07c72254d
commit 1dc0fcec47
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/macos/defense_evasion_tcc_bypass_mounted_apfs_access.toml
+2 -2
View File
@@ -1,7 +1,7 @@
[metadata]
creation_date = "2020/01/04"
maturity = "production"
updated_date = "2021/03/03"
updated_date = "2022/07/20"
[rule]
author = ["Elastic"]
@@ -19,7 +19,7 @@ references = ["https://theevilbit.github.io/posts/cve_2020_9771/"]
risk_score = 73
rule_id = "b00bcd89-000c-4425-b94c-716ef67762f6"
severity = "high"
tags = ["Elastic", "Host", "macOS", "Threat Detection", "Defense Evasion"]
tags = ["Elastic", "Host", "macOS", "Threat Detection", "Defense Evasion", "CVE_2020_9771"]
timestamp_override = "event.ingested"
type = "query"