vee1e/capa-rules
1
0
Fork 0
mirror of https://github.com/vee1e/capa-rules.git synced 2026-09-01 19:07:15 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #799 from mandiant/mr-tz-patch-1

Browse source 
Update act-as-credential-manager-dll.yml
This commit is contained in:
Moritz 2023-08-07 15:54:18 +02:00 • committed by GitHub
commit 149cf2d133
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
persistence/authentication-process/act-as-credential-manager-dll.yml
View file

@ -6,7 +6,7 @@ rule:
- jakub.jozwiak@mandiant.com
scope: file
att&ck:
- Persistence::Modify Authentication Process [T1556]
- Persistence::Modify Authentication Process::Network Provider DLL [T1556.008]
examples:
- b283415c9df06f0e53b7d452d3e5c840c5bd7a6ce734a30bae4a869a57974a0e
features: