paulmataruso/main
1
0
Fork 0
mirror of https://github.com/socfortress/Wazuh-Rules.git synced 2025-10-23 00:02:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update and rename 91570-win_logonsessions_rules.xml to 100070-win_logonsessions_rules.xml

Browse Source
This commit is contained in:
taylor_socfortress
2023-03-07 08:03:04 -06:00
committed by GitHub
parent be1c6f9e80
commit 0f8c10fad3
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
Windows Logon Sessions/91570-win_logonsessions_rules.xml → Windows Logon Sessions/100070-win_logonsessions_rules.xml
View File

@@ -1,5 +1,5 @@
<group name="windows,"> <group name="windows,">
<rule id="91570" level="3"> <rule id="100070" level="3">
<decoded_as>json</decoded_as> <decoded_as>json</decoded_as>
<field name="LogonSession">\.+</field> <field name="LogonSession">\.+</field>
<field name="UserName">\.+</field> <field name="UserName">\.+</field>