security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[Rule Tuning] Remove all rule timelines (#466)

Browse Source
This commit is contained in:
Justin Ibarra
2020-11-03 19:51:53 +01:00
committed by GitHub
parent da64bacac1
commit f87f2a46f4
177 changed files with 177 additions and 531 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/execution_command_shell_started_by_unusual_process.toml
+1 -3
View File
@@ -2,7 +2,7 @@
creation_date = "2020/08/21"
ecs_version = ["1.6.0"]
maturity = "production"
updated_date = "2020/11/02"
updated_date = "2020/11/03"
[rule]
author = ["Elastic"]
@@ -16,8 +16,6 @@ risk_score = 47
rule_id = "3b47900d-e793-49e8-968f-c90dc3526aa1"
severity = "medium"
tags = ["Elastic", "Host", "Windows", "Threat Detection", "Execution"]
timeline_id = "76e52245-7519-4251-91ab-262fb1a1728c"
timeline_title = "Generic Process Timeline"
type = "query"
query = '''