Typo fix
This commit is contained in:
Родитель
e42a3e2770
Коммит
603816bcd0
|
@ -29,7 +29,7 @@ query: |
|
|||
// Where changes relate to Exchange OAB
|
||||
| extend ObjectClass = column_ifexists("ObjectClass", "")
|
||||
| where ObjectClass =~ "msExchOABVirtualDirectory"
|
||||
// Look for AttributeLDAPDisplayName or ExternalHostName properties being changed
|
||||
// Look for InternalHostName or ExternalHostName properties being changed
|
||||
| extend AttributeLDAPDisplayName = column_ifexists("AttributeLDAPDisplayName", "")
|
||||
| where AttributeLDAPDisplayName in ("msExchExternalHostName", "msExchInternalHostName")
|
||||
// Look for suspected webshell activity
|
||||
|
|
Загрузка…
Ссылка в новой задаче