Update host-interaction/os/hide-shutdown-actions-via-policy.yml

mandiant · Sep 26, 2024 · 3635653 · 3635653
1 parent a011bc5
commit 3635653
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/host-interaction/os/hide-shutdown-actions-via-policy.yml b/host-interaction/os/hide-shutdown-actions-via-policy.yml
@@ -9,10 +9,10 @@ rule:
       dynamic: call
     att&ck:
       - Defense Evasion::Modify Registry [T1112]
-    examples:
-      - a6594d9550d56ddeaac8b3140821e698eefb7163ba29f0119c2ef19beb6040b0:0x14000b47f
     references:
       - https://securelist.com/mallox-ransomware/113529/
+    examples:
+      - a6594d9550d56ddeaac8b3140821e698eefb7163ba29f0119c2ef19beb6040b0:0x14000b47f
   features:
     - and:
       - optional: