From eaf33d6a6ce6edc4577ff621c4e52c9a9ae7b924 Mon Sep 17 00:00:00 2001 From: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com> Date: Wed, 29 Nov 2023 19:59:41 +0100 Subject: [PATCH] Update dns_query_win_susp_ipify.yml --- rules/windows/dns_query/dns_query_win_susp_ipify.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/windows/dns_query/dns_query_win_susp_ipify.yml b/rules/windows/dns_query/dns_query_win_susp_ipify.yml index 1a8c3d64034..617b388b69b 100644 --- a/rules/windows/dns_query/dns_query_win_susp_ipify.yml +++ b/rules/windows/dns_query/dns_query_win_susp_ipify.yml @@ -8,7 +8,7 @@ references: - https://www.trendmicro.com/en_us/research/23/e/managed-xdr-investigation-of-ducktail-in-trend-micro-vision-one.html author: Brandon George (blog post), Thomas Patzke date: 2021/07/08 -modified: 2023/05/12 +modified: 2023/11/29 tags: - attack.reconnaissance - attack.t1590