Updated fields & renamed

lukiffer · Sep 27, 2020 · e7c8197 · e7c8197
1 parent ebe3dce
commit e7c8197
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/...try_event/sysmon_comhijack_uac_bypass.yml → ...registry_event/sysmon_comhijack_sdclt.yml b/...try_event/sysmon_comhijack_uac_bypass.yml → ...registry_event/sysmon_comhijack_sdclt.yml
@@ -1,4 +1,4 @@
-title: com hijack & uac bypass via sdclt
+title: COM hijack via Sdclt
 id: 07743f65-7ec9-404a-a519-913db7118a8d
 status: experimental
 description: Detects changes to 'HKCU\Software\Classes\Folder\shell\open\command\DelegateExecute'
@@ -7,8 +7,8 @@ references:
     - https://www.exploit-db.com/exploits/47696
 tags:
     - attack.privilege_escalation
-    - attack.T1546
-    - attack.T1548
+    - attack.t1546
+    - attack.t1548
 author: Omkar Gudhate
 date: 2020/09/27
 logsource: