From 6b9d15b001a4a1f11813e8ac1604520b56150ad5 Mon Sep 17 00:00:00 2001 From: Justin C <47709940+endisphotic@users.noreply.github.com> Date: Thu, 3 Jun 2021 13:46:49 -0700 Subject: [PATCH] Update Distribution from remote location.md --- Ransomware/Distribution from remote location.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Ransomware/Distribution from remote location.md b/Ransomware/Distribution from remote location.md index fb771d4..1da8298 100644 --- a/Ransomware/Distribution from remote location.md +++ b/Ransomware/Distribution from remote location.md @@ -1,4 +1,4 @@ -# Potential distribution of ransomware +# Distribution from remote location This query checks for alerts related to file drop and remote execution where the file name matches PsExec and similar tools used for distribution