Skip to content

Commit d097e12

Browse files
Update windows_smb_ipc_admin_no_signing.yml
1 parent 510f3ac commit d097e12

1 file changed

Lines changed: 4 additions & 4 deletions

File tree

rules/windows/builtin/windows_smb_ipc_admin_no_signing.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -8,10 +8,10 @@ tags:
88
- attack.lateral-movement
99
- attack.t1021.002
1010
logsource:
11-
product: windows
12-
service: smbserver/connectivity
13-
provider: Microsoft-Windows-SMBServer
14-
definition: Requires events from Microsoft-Windows-SMBServer/Connectivity
11+
product: windows
12+
service: smbserver/connectivity
13+
provider: Microsoft-Windows-SMBServer
14+
definition: Requires events from Microsoft-Windows-SMBServer/Connectivity
1515
detection:
1616
smb:
1717
Channel: Microsoft-Windows-SMBServer/Connectivity

0 commit comments

Comments
 (0)