Update detection for ioreg.yml

infosecB · Mar 26, 2024 · a796ac0 · a796ac0
1 parent bb2747c
commit a796ac0
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/LOOBins/ioreg.yml b/LOOBins/ioreg.yml
@@ -43,8 +43,8 @@ example_use_cases:
 paths:
 - /usr/sbin/ioreg
 detections:
-- name: No detections at time of publishing
-  url: N/A
+- name: System Information Discovery Using Ioreg
+  url: https://github.com/SigmaHQ/sigma/blob/master/rules/macos/process_creation/proc_creation_macos_ioreg_discovery.yml
 resources:
   - name: 'Evasions: macOS'
     url: https://evasions.checkpoint.com/techniques/macos.html