xworm

MHaggis · web-flow · commit 55dfdddc4fa4 · 2025-05-20T10:48:07.000-06:00
diff --git a/detections/endpoint/powershell_4104_hunting.yml b/detections/endpoint/powershell_4104_hunting.yml
@@ -77,6 +77,7 @@ tags:
     - SystemBC
     - PHP-CGI RCE Attack on Japanese Organizations
     - Water Gamayun
+    - XWorm
   asset_type: Endpoint
   mitre_attack_id:
   - T1059.001
