更新ioc插件

国庆更新: 更新ioc插件
2022-09-29 16:53:29 +08:00
parent 1aece69ad5
commit b3c6b5ae3a
9 changed files with 416 additions and 72 deletions
--- a/Server/rules/py/attck/action.py
+++ b/Server/rules/py/attck/action.py
@@ -30,6 +30,7 @@ rule = [
            'action == "createremotethread"',
        ],
        'attck_hit':['T1055'],
+        'score': 30,
        'name': 'Process Injection'
    },
    {