[Rule Tuning] Tag Categorization Updates (#380)
* Add new categorization tags * Change updated_date to 2020/10/26 Co-authored-by: Ross Wolf <31489089+rw-access@users.noreply.github.com>, @bm11100
This commit is contained in:
@@ -2,7 +2,7 @@
|
||||
creation_date = "2020/08/21"
|
||||
ecs_version = ["1.6.0"]
|
||||
maturity = "production"
|
||||
updated_date = "2020/09/30"
|
||||
updated_date = "2020/10/26"
|
||||
|
||||
[rule]
|
||||
author = ["Elastic"]
|
||||
@@ -15,7 +15,7 @@ name = "Unusual Parent Process for cmd.exe"
|
||||
risk_score = 47
|
||||
rule_id = "3b47900d-e793-49e8-968f-c90dc3526aa1"
|
||||
severity = "medium"
|
||||
tags = ["Elastic", "Windows"]
|
||||
tags = ["Elastic", "Host", "Windows", "Threat Detection", "Execution"]
|
||||
type = "query"
|
||||
|
||||
query = '''
|
||||
|
||||
Reference in New Issue
Block a user