security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update tags to include C2 tactic (#2140)

Browse Source
This commit is contained in:
Mika Ayenson
2022-07-22 16:39:25 -04:00
committed by GitHub
parent d6527afd51
commit f176b5ef57
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/macos/execution_installer_spawned_network_event.toml
+2 -2
View File
@@ -1,7 +1,7 @@
[metadata]
creation_date = "2021/02/23"
maturity = "production"
updated_date = "2022/03/31"
updated_date = "2022/07/21"
[rule]
author = ["Elastic"]
@@ -27,7 +27,7 @@ references = [
risk_score = 47
rule_id = "99239e7d-b0d4-46e3-8609-acafcf99f68c"
severity = "medium"
tags = ["Elastic", "Host", "macOS", "Threat Detection", "Execution"]
tags = ["Elastic", "Host", "macOS", "Threat Detection", "Execution", "Command and Control"]
type = "eql"
query = '''