You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{
"Module": "Sigma",
"aurora_eventid": 95,
"error": "syntax error in selection element of rule Process Deletion of Its Own Executable: invalid Modifier "fieldref"",
"file": "public\windows\file\file_delete\file_delete_win_delete_own_image.yml",
"id": "f01d1f70-cd41-42ec-9c0b-26dd9c22bf29",
"level": "error",
"msg": "Could not compile rule",
"time": "2024-09-27T20:16:55+02:00",
"title": "Process Deletion of Its Own Executable",
"_Match": [
"-"
],
"_Description": []
}
Description
can someone tell me what that is ?
The text was updated successfully, but these errors were encountered:
Rule UUID
f01d1f70-cd41-42ec-9c0b-26dd9c22bf29
Example EventLog
{
"Module": "Sigma",
"aurora_eventid": 95,
"error": "syntax error in selection element of rule Process Deletion of Its Own Executable: invalid Modifier "fieldref"",
"file": "public\windows\file\file_delete\file_delete_win_delete_own_image.yml",
"id": "f01d1f70-cd41-42ec-9c0b-26dd9c22bf29",
"level": "error",
"msg": "Could not compile rule",
"time": "2024-09-27T20:16:55+02:00",
"title": "Process Deletion of Its Own Executable",
"_Match": [
"-"
],
"_Description": []
}
Description
can someone tell me what that is ?
The text was updated successfully, but these errors were encountered: