security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update License to Elastic v2 (#944)

Browse Source
This commit is contained in:
Justin Ibarra
2021-03-03 22:12:11 -09:00
committed by GitHub
parent 8c4df09542
commit 3fc34b86f2
692 changed files with 1670 additions and 1618 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/initial_access_script_executing_powershell.toml
+2 -2
View File
@@ -1,7 +1,7 @@
[metadata]
creation_date = "2020/02/18"
maturity = "production"
updated_date = "2021/02/16"
updated_date = "2021/03/03"
[rule]
author = ["Elastic"]
@@ -12,7 +12,7 @@ executing a PowerShell script, may be indicative of malicious activity.
from = "now-9m"
index = ["winlogbeat-*", "logs-endpoint.events.*", "logs-windows.*"]
language = "kuery"
license = "Elastic License"
license = "Elastic License v2"
name = "Windows Script Executing PowerShell"
risk_score = 21
rule_id = "f545ff26-3c94-4fd0-bd33-3c7f95a3a0fc"