Tag fixes

SigmaHQ · Aug 7, 2018 · 64fa3b1 · 64fa3b1
1 parent 6472be5
commit 64fa3b1
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/rules/windows/sysmon/sysmon_uac_bypass_sdclt.yml b/rules/windows/sysmon/sysmon_uac_bypass_sdclt.yml
@@ -13,8 +13,8 @@ detection:
         TargetObject: 'HKEY_USERS\*\Classes\exefile\shell\runas\command\isolatedCommand'
     condition: selection
 tags:
-    - attack.defense_Evasion
-    - attack.privelege_Escalation
+    - attack.defense_evasion
+    - attack.privilege_escalation
     - attack.t1088
 falsepositives:
     - unknown