Agent: Add T1098 (Account Manipulation) to ZerologonExploiter

This commit is contained in:
Ilija Lazoroski 2022-08-16 23:56:05 +02:00
parent 3c8091d242
commit f8b56dd171
1 changed files with 2 additions and 1 deletions

View File

@ -33,9 +33,10 @@ logger = logging.getLogger(__name__)
ZEROLOGON_EXPLOIT_TAG = "zerologon-exploiter"
T1003_TAG = "attack-t1003"
T1098_TAG = "attack-t1098"
ZEROLOGON_EVENT_TAGS = {ZEROLOGON_EXPLOIT_TAG, T1003_TAG}
ZEROLOGON_EVENT_TAGS = {ZEROLOGON_EXPLOIT_TAG, T1003_TAG, T1098_TAG}
class ZerologonExploiter(HostExploiter):