Skip to content

Commit 3c718b5

Browse files
committed
Update command_and_control_suricata_elastic_defend_c2.toml
1 parent e5eee69 commit 3c718b5

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

rules/cross-platform/command_and_control_suricata_elastic_defend_c2.toml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ from = "now-9m"
1414
index = ["logs-endpoint.events.network-*", "logs-panw.panos-*"]
1515
language = "eql"
1616
license = "Elastic License v2"
17-
name = "Suricata and Elastic Defend - Command and Control Correlation"
17+
name = "Suricata and Elastic Defend Network Correlation"
1818
references = [
1919
"https://attack.mitre.org/tactics/TA0011/",
2020
"https://www.elastic.co/docs/reference/integrations/panw",
@@ -49,7 +49,7 @@ sequence by source.port, source.ip, destination.ip with maxspan=1m
4949
'''
5050
note = """## Triage and analysis
5151
52-
### Investigating Suricata and Elastic Defend - Command and Control Correlation
52+
### Investigating Suricata and Elastic Defend Network Correlation
5353
5454
### Possible investigation steps
5555

0 commit comments

Comments
 (0)