Skip to content

Commit

Permalink
Update proc_creation_win_quickassist_execution.yml
Browse files Browse the repository at this point in the history
  • Loading branch information
nasbench committed Dec 19, 2024
1 parent f64ed34 commit ef3088d
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
title: QuickAssist Execution
id: e20b5b14-ce93-4230-88af-981983ef6e74
status: experimental
description: \
description: |
Detects the execution of Microsoft Quick Assist tool "QuickAssist.exe". This utility can be used by attackers to gain remote access.
references:
- https://www.microsoft.com/en-us/security/blog/2024/05/15/threat-actors-misusing-quick-assist-in-social-engineering-attacks-leading-to-ransomware/
Expand Down

0 comments on commit ef3088d

Please sign in to comment.