UEBA queries - fix tactics to be with no white spaces

This commit is contained in:
Igal Shapira 2021-01-17 13:52:14 +02:00
Родитель 53fd116195
Коммит 59d89255b3
2 изменённых файлов: 2 добавлений и 2 удалений

Просмотреть файл

@ -3,7 +3,7 @@ name: Anomalous Activity Role Assignment
description: |
'Adversaries may circumvent mechanisms designed to control elevate privileges to gain higher-level permissions. The query below generates an output of all users performing an "action" operation regarding a access elevation, where one or more features of the activitiy deviates from the user, his peers or the tenant profile.'
tactics:
- Privilege Escalation
- PrivilegeEscalation
relevantTechniques:
- T1548
query: |

Просмотреть файл

@ -7,7 +7,7 @@ requiredDataConnectors:
dataTypes:
- BehaviorAnalytics
tactics:
- Defense Evasion
- DefenseEvasion
relevantTechniques:
- T1562
query: |