Update command_and_control_new_terms_commonly_abused_rat_execution.toml (#4842)
Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com>
This commit is contained in:
@@ -2,7 +2,7 @@
|
||||
creation_date = "2023/04/03"
|
||||
integration = ["endpoint", "windows", "system"]
|
||||
maturity = "production"
|
||||
updated_date = "2025/05/05"
|
||||
updated_date = "2025/06/24"
|
||||
|
||||
[rule]
|
||||
author = ["Elastic"]
|
||||
@@ -108,7 +108,9 @@ host.os.type: "windows" and
|
||||
"Monitoring Client" or
|
||||
"MMSOFT Design Ltd." or
|
||||
"Nanosystems S.r.l." or
|
||||
"NetSupport Ltd" or
|
||||
"NetSupport Ltd" or
|
||||
"NetSupport Ltd." or
|
||||
"NETSUPPORT LTD." or
|
||||
"NinjaRMM, LLC" or
|
||||
"Parallels International GmbH" or
|
||||
"philandro Software GmbH" or
|
||||
|
||||
Reference in New Issue
Block a user