Update proc_creation_win_schtasks_openssh_tunnelling.yml

Updated spelling mistake
SigmaHQ · Dec 30, 2024 · 2c5fa2e · 2c5fa2e
1 parent a3f5cae
commit 2c5fa2e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rules/windows/process_creation/proc_creation_win_schtasks_openssh_tunnelling.yml b/rules/windows/process_creation/proc_creation_win_schtasks_openssh_tunnelling.yml
@@ -1,4 +1,4 @@
-title: Potential SSH Tunnel Persistance Install Using A Scheduled Task
+title: Potential SSH Tunnel Persistence Install Using A Scheduled Task
 id: 2daa93a0-a5fb-41c5-8cd8-3c11294bfd1f
 status: experimental
 description: Detects the creation of new scheduled tasks via commandline, using Schtasks.exe. This rule detects tasks creating that call OpenSSH, which may indicate the creation of Reverse SSH Tunnel to an attackers server.