Update command_and_control_new_terms_commonly_abused_rat_execution.toml (#4842)

Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com>
This commit is contained in:
Samirbous
2025-06-25 16:39:48 +01:00
committed by GitHub
parent fe327a7560
commit 4fb31c7ea6
@@ -2,7 +2,7 @@
creation_date = "2023/04/03"
integration = ["endpoint", "windows", "system"]
maturity = "production"
updated_date = "2025/05/05"
updated_date = "2025/06/24"
[rule]
author = ["Elastic"]
@@ -108,7 +108,9 @@ host.os.type: "windows" and
"Monitoring Client" or
"MMSOFT Design Ltd." or
"Nanosystems S.r.l." or
"NetSupport Ltd" or
"NetSupport Ltd" or
"NetSupport Ltd." or
"NETSUPPORT LTD." or
"NinjaRMM, LLC" or
"Parallels International GmbH" or
"philandro Software GmbH" or