Adding with changes

Hunting Queries/Syslog/Process_Termination_Activity.yaml

@@ -1,5 +1,5 @@
 id: 020b05d3-6447-402c-87b6-f8faff7c7e19
-name: Security-related process termination activity detected
+name: Linux security related process termination activity detected
 description: |
   'This query will alert on any attempts to terminate processes related to security monitoring on the host. 
   Attackers will often try to terminate such processes post-compromise as seen recently to exploit the remote code execution vulnerability in Log4j component of Apache.
@@ -15,6 +15,8 @@ relevantTechniques:
   - T1489
 tags:
   - CVE-2021-44228
+  - Log4j
+  - Log4Shell
 query: |
   Syslog
   | where Facility == 'user'