Added

SigmaHQ · Nov 20, 2023 · 9e5a0a9 · 9e5a0a9
1 parent 37b6102
commit 9e5a0a9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rules/windows/network_connection/net_connection_win_devtunnel_data_exfil.yml b/rules/windows/network_connection/net_connection_win_devtunnel_data_exfil.yml
@@ -25,5 +25,5 @@ detection:
             - '.rel.tunnels.api.visualstudio.com'
     condition: selection
 falsepositives:
-    - Legitimate use of ngrok domains
+    - Legitimate use of DevTunnels/Forwarded Ports domains
 level: high