From 33cdd98446f77a05fe5bb06e35d922958165ebc8 Mon Sep 17 00:00:00 2001
From: Ryan Xu <ryanxu@wustl.edu>
Date: Fri, 12 Nov 2021 08:56:54 -0600
Subject: [PATCH] Update rebuild-import-table.yml

Resolve comment
---
 load-code/pe/rebuild-import-table.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/load-code/pe/rebuild-import-table.yml b/load-code/pe/rebuild-import-table.yml
index 579bd0a4..9c8fc53c 100644
--- a/load-code/pe/rebuild-import-table.yml
+++ b/load-code/pe/rebuild-import-table.yml
@@ -5,7 +5,7 @@ rule:
     author: "@Ana06"
     scope: function
     mbc:
-      - Data::Code::Rebuild Import Table [C0062.004]
+      - Defense Evasion::Hijack Execution Flow::Import Address Table (IAT) Hooking [F0005.m03]
     references:
       - https://0x00sec.org/t/reflective-dll-injection/3080
       - https://www.ired.team/offensive-security/code-injection-process-injection/reflective-dll-injection