security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Rule Tuning Update MITRE Details (#2526)

Browse Source 
Co-authored-by: Isai <59296946+imays11@users.noreply.github.com>
This commit is contained in:
shashank-elastic
2023-02-10 23:05:28 +05:30
committed by GitHub
parent 8a7ad13611
commit f8e97da549
9 changed files with 138 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/cross-platform/execution_python_script_in_cmdline.toml
+5 -1
View File
@@ -2,7 +2,7 @@
creation_date = "2021/01/13"
integration = ["endpoint"]
maturity = "development"
updated_date = "2022/12/14"
updated_date = "2023/02/07"
[rule]
author = ["Elastic"]
@@ -43,6 +43,10 @@ reference = "https://attack.mitre.org/techniques/T1059/"
id = "T1059.006"
name = "Python"
reference = "https://attack.mitre.org/techniques/T1059/006/"
[[rule.threat.technique.subtechnique]]
id = "T1059.003"
name = "Windows Command Shell"
reference = "https://attack.mitre.org/techniques/T1059/003/"