diff --git a/windows-registry-monitoring.conf b/windows-registry-monitoring.conf index 9aa2ffa..2d307b1 100644 --- a/windows-registry-monitoring.conf +++ b/windows-registry-monitoring.conf @@ -79,7 +79,7 @@ "HKLM_Image_File_Execution_Options": { "query": "select name,type,data from registry where key='HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options';", "interval": 3600, - "description": "Returns the content of the key HKLM_Image_File_Execution_Options - ATT&CK T1015", + "description": "Returns the content of the key HKLM_Image_File_Execution_Options - ATT&CK T1183", "removed": false }, "HKCU_Logon_Scripts": {