Restricted Software Access By SRP

Rule Info

Name
Restricted Software Access By SRP
Description
Detects restricted access to applications by the Software Restriction Policies (SRP) policy
Modified
None
Date
2023-01-12 00:00:00
Author
frack113
Tags
attack.defense_evasion DEMO attack.t1072
Id
b4c8da4a-1c12-46b0-8a2b-0a8521d03442
Type
Community Rule

Rule History

Author
Commit
Title
Date
Nasreddine Bencherchali
fix: add new ref
2023-01-12
frack113
Update win_software_restriction_policies_block.yml
2023-01-12
frack113
Update win_software_restriction_policies_block.yml
2023-01-12
frack113
Add win_software_restriction_policies_block
2023-01-12