Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bug in Chafer Activity rule #269

Closed
LiamSennitt opened this issue Mar 1, 2019 · 0 comments
Closed

Bug in Chafer Activity rule #269

LiamSennitt opened this issue Mar 1, 2019 · 0 comments

Comments

@LiamSennitt
Copy link
Contributor

The report referenced in the Chafer Activity rule rules/apt/apt_chafer_mar18.yml describes the use of scheduled tasks for persistence with task names of "SC Scheduled Scan" and "UpdatMachine". The current rule is looking for these values in a service name as part of a new service event.

LiamSennitt added a commit to LiamSennitt/sigma that referenced this issue Mar 1, 2019
Neo23x0 added a commit that referenced this issue Mar 1, 2019
fix bug in chafer activity rule #269
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant