From 412832345118b6bdc7b86bcb6a1a2e7748efebef Mon Sep 17 00:00:00 2001 From: phantinuss <79651203+phantinuss@users.noreply.github.com> Date: Tue, 17 Oct 2023 16:19:29 +0200 Subject: [PATCH] fix: remove duplicate 'modified' --- .../builtin/security/win_security_susp_lsass_dump_generic.yml | 1 - .../proc_access_win_direct_syscall_ntopenprocess.yml | 1 - .../process_creation/proc_creation_win_schtasks_system.yml | 1 - .../proc_creation_win_susp_elevated_system_shell.yml | 1 - 4 files changed, 4 deletions(-) diff --git a/rules/windows/builtin/security/win_security_susp_lsass_dump_generic.yml b/rules/windows/builtin/security/win_security_susp_lsass_dump_generic.yml index eb1af4d8d7b..c8707996755 100644 --- a/rules/windows/builtin/security/win_security_susp_lsass_dump_generic.yml +++ b/rules/windows/builtin/security/win_security_susp_lsass_dump_generic.yml @@ -8,7 +8,6 @@ references: author: Roberto Rodriguez, Teymur Kheirkhabarov, Dimitrios Slamaris, Mark Russinovich, Aleksey Potapov, oscd.community (update) date: 2019/11/01 modified: 2023/10/11 -modified: 2023/10/11 tags: - attack.credential_access - car.2019-04-004 diff --git a/rules/windows/process_access/proc_access_win_direct_syscall_ntopenprocess.yml b/rules/windows/process_access/proc_access_win_direct_syscall_ntopenprocess.yml index 05eeccb691c..82d8dd88d18 100755 --- a/rules/windows/process_access/proc_access_win_direct_syscall_ntopenprocess.yml +++ b/rules/windows/process_access/proc_access_win_direct_syscall_ntopenprocess.yml @@ -7,7 +7,6 @@ references: author: Christian Burkard (Nextron Systems), Tim Shelton date: 2021/07/28 modified: 2023/10/11 -modified: 2023/10/11 tags: - attack.execution - attack.t1106 diff --git a/rules/windows/process_creation/proc_creation_win_schtasks_system.yml b/rules/windows/process_creation/proc_creation_win_schtasks_system.yml index e8b82546f5c..9e7d9d330a4 100644 --- a/rules/windows/process_creation/proc_creation_win_schtasks_system.yml +++ b/rules/windows/process_creation/proc_creation_win_schtasks_system.yml @@ -8,7 +8,6 @@ references: author: Nasreddine Bencherchali (Nextron Systems) date: 2022/07/28 modified: 2023/10/11 -modified: 2023/10/11 tags: - attack.execution - attack.persistence diff --git a/rules/windows/process_creation/proc_creation_win_susp_elevated_system_shell.yml b/rules/windows/process_creation/proc_creation_win_susp_elevated_system_shell.yml index 7a698db8b1e..d30fc20b771 100644 --- a/rules/windows/process_creation/proc_creation_win_susp_elevated_system_shell.yml +++ b/rules/windows/process_creation/proc_creation_win_susp_elevated_system_shell.yml @@ -7,7 +7,6 @@ references: author: frack113, Tim Shelton (update fp) date: 2022/12/05 modified: 2023/10/11 -modified: 2023/10/11 tags: - attack.privilege_escalation - attack.defense_evasion