Update proc_creation_win_code_devtunnel_tunneling.yml

SigmaHQ · Sep 15, 2024 · 3328d51 · 3328d51
1 parent fb40037
commit 3328d51
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/rules/windows/process_creation/proc_creation_win_code_devtunnel_tunneling.yml b/rules/windows/process_creation/proc_creation_win_code_devtunnel_tunneling.yml
@@ -8,8 +8,8 @@ References:
 author: 0xAnalyst
 date: 2024-08-14
 tags:
-  - attack.persistence
-  - attack.t1071
+    - attack.persistence
+    - attack.t1071
 logsource:
     product: windows
     service: process_creation