security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update License to Elastic v2 (#944)

Browse Source
This commit is contained in:
Justin Ibarra
2021-03-03 22:12:11 -09:00
committed by GitHub
parent 8c4df09542
commit 3fc34b86f2
692 changed files with 1670 additions and 1618 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/execution_command_shell_started_by_powershell.toml
+2 -2
View File
@@ -1,7 +1,7 @@
[metadata]
creation_date = "2020/02/18"
maturity = "production"
updated_date = "2021/02/16"
updated_date = "2021/03/03"
[rule]
author = ["Elastic"]
@@ -9,7 +9,7 @@ description = "Identifies a suspicious parent child process relationship with cm
from = "now-9m"
index = ["winlogbeat-*", "logs-endpoint.events.*", "logs-windows.*"]
language = "kuery"
license = "Elastic License"
license = "Elastic License v2"
name = "PowerShell spawning Cmd"
risk_score = 21
rule_id = "0f616aee-8161-4120-857e-742366f5eeb3"