fix: shorten filenames

SigmaHQ · Mar 5, 2023 · e5c75d3 · e5c75d3
1 parent e3503d5
commit e5c75d3
Show file tree

Hide file tree

Showing 9 changed files with 1 addition and 1 deletion.
diff --git a/...unauthenticated_privileged_cmd_access.yml → ..._creation_win_cmd_sticky_keys_replace.yml b/...unauthenticated_privileged_cmd_access.yml → ..._creation_win_cmd_sticky_keys_replace.yml
diff --git a/..._sensitive_files_with_credential_data.yml → ...tion_win_esentutl_sensitive_file_copy.yml b/..._sensitive_files_with_credential_data.yml → ...tion_win_esentutl_sensitive_file_copy.yml
diff --git a/..._cobaltstrike_getsystem_service_start.yml → ...eation_win_hktl_meterpreter_getsystem.yml b/..._cobaltstrike_getsystem_service_start.yml → ...eation_win_hktl_meterpreter_getsystem.yml
diff --git a/...ilege_escalation_via_service_reg_perm.yml → ..._privilege_escalation_via_service_key.yml b/...ilege_escalation_via_service_reg_perm.yml → ..._privilege_escalation_via_service_key.yml
diff --git a/...s_anydesk_execution_from_susp_folders.yml → ...remote_access_tools_anydesk_susp_exec.yml b/...s_anydesk_execution_from_susp_folders.yml → ...remote_access_tools_anydesk_susp_exec.yml
diff --git a/...pport_execution_from_unusual_location.yml → ...ote_access_tools_netsupport_susp_exec.yml b/...pport_execution_from_unusual_location.yml → ...ote_access_tools_netsupport_susp_exec.yml
diff --git a/...s/windows/process_creation/proc_creation_win_remote_access_tools_screenconnect_access.yml b/...s/windows/process_creation/proc_creation_win_remote_access_tools_screenconnect_access.yml
@@ -1,4 +1,4 @@
-title: Remote Access Tool - ScreenConnect Execution
+title: Remote Access Tool - ScreenConnect Suspicious Execution
 id: 75bfe6e6-cd8e-429e-91d3-03921e1d7962
 status: test
 description: Detects ScreenConnect program starts that establish a remote access to that system (not meeting, not remote support)

diff --git a/...l_elevated_msi_spawned_cmd_powershell.yml → ...n_win_susp_elavated_msi_spawned_shell.yml b/...l_elevated_msi_spawned_cmd_powershell.yml → ...n_win_susp_elavated_msi_spawned_shell.yml
diff --git a/...rivilege_escalation_cli_flag_patterns.yml → ...usp_privilege_escalation_cli_patterns.yml b/...rivilege_escalation_cli_flag_patterns.yml → ...usp_privilege_escalation_cli_patterns.yml