Skip to content

Commit da83559

Browse files
alexcote1github-actions[bot]
authored andcommitted
fix typo in lateral_movement_remote_services.toml (#3538)
(cherry picked from commit 1384472)
1 parent e318d55 commit da83559

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

rules/windows/lateral_movement_remote_services.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ authenticode.path JOIN hash ON services.path = hash.path WHERE authenticode.resu
3636
author = ["Elastic"]
3737
description = """
3838
Identifies remote execution of Windows services over remote procedure call (RPC). This could be indicative of lateral
39-
movement, but will be noisy if commonly done by administrators."
39+
movement, but will be noisy if commonly done by administrators.
4040
"""
4141
from = "now-9m"
4242
index = ["logs-endpoint.events.*", "winlogbeat-*", "logs-windows.sysmon_operational-*"]

0 commit comments

Comments
 (0)