sigma
sigma copied to clipboard
Update proc_creation_win_findstr_security_keyword_lookup.yml
Summary of the Pull Request
Update Rule: security Tools Keyword Lookup Via Findstr.EXE
Changelog
Update proc_creation_win_findstr_security_keyword_lookup.yml
Example Log Event
Add some security keywords to the list. https://www.joesandbox.com/analysis/1547706/0/html
Fixed Issues
SigmaHQ Rule Creation Conventions
- If your PR adds new rules, please consider following and applying these conventions
Also requested by https://github.com/SigmaHQ/sigma/issues/5539