Update persistence_site_and_user_customize_file_creation.toml

Aegrah · web-flow · commit 6dd538ce39c3 · 2025-02-27T16:45:08.000+01:00
diff --git a/rules/linux/persistence_site_and_user_customize_file_creation.toml b/rules/linux/persistence_site_and_user_customize_file_creation.toml
@@ -82,7 +82,7 @@ file.path like~ (
 framework = "MITRE ATT&CK"
 
 [[rule.threat.technique]]
-id = "T1543"
+id = "T1546"
 name = "Event Triggered Execution"
 reference = "https://attack.mitre.org/techniques/T1546/"
 
