diff --git a/behavior/rules/windows/defense_evasion_amsi_bypass_via_unbacked_memmory.toml b/behavior/rules/windows/defense_evasion_amsi_bypass_via_unbacked_memory.toml similarity index 97% rename from behavior/rules/windows/defense_evasion_amsi_bypass_via_unbacked_memmory.toml rename to behavior/rules/windows/defense_evasion_amsi_bypass_via_unbacked_memory.toml index 5f9a877..2d43be5 100644 --- a/behavior/rules/windows/defense_evasion_amsi_bypass_via_unbacked_memmory.toml +++ b/behavior/rules/windows/defense_evasion_amsi_bypass_via_unbacked_memory.toml @@ -5,7 +5,7 @@ memory. """ id = "06516087-9305-482b-af9a-92f4386d2f19" license = "Elastic License v2" -name = "AMSI Bypass via Unbacked Memmory" +name = "AMSI Bypass via Unbacked Memory" os_list = ["windows"] reference = [ "https://aidenpearce369.github.io/offsec/AMSI-Memory-Bypass/",