Update proc_creation_win_sqlite_firefox_gecko_profile_data.yml

YamatoSecurity · Jan 20, 2023 · 6de42e0 · 6de42e0
1 parent 51b5f68
commit 6de42e0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rules/windows/process_creation/proc_creation_win_sqlite_firefox_gecko_profile_data.yml b/rules/windows/process_creation/proc_creation_win_sqlite_firefox_gecko_profile_data.yml
@@ -1,7 +1,7 @@
 title: SQLite Firefox Profile Data DB Access
 id: 4833155a-4053-4c9c-a997-777fcea0baa7
 status: experimental
-description:  Detect usage of the "sqlite" binary to query databases in Firefox and other Gecko-based browsers for potential data stealing.
+description: Detect usage of the "sqlite" binary to query databases in Firefox and other Gecko-based browsers for potential data stealing.
 references:
     - https://github.com/redcanaryco/atomic-red-team/blob/f339e7da7d05f6057fdfcdd3742bfcf365fee2a9/atomics/T1539/T1539.md#atomic-test-1---steal-firefox-cookies-windows
     - https://blog.cyble.com/2022/04/21/prynt-stealer-a-new-info-stealer-performing-clipper-and-keylogger-activities/