FortiSIEM Discussions
JohnCheong
New Contributor II

FortiSIEM - Resources > Rules > Windows: DPAPI Domain Master Key Backup Attempt

Hi,
Resources > Rules > Windows: DPAPI Domain Master Key Backup Attempt

Again newbie here, would like to ask in the above rules description got a broken link.
"https://github.com/SigmaHQ/sigma/blob/master/rules/windows/builtin/win_dpapi_domain_masterkey_backup... .. I would like to remove it .. but when i delete the link and click save, it save into a new copy .. 
Any way for me to remove that?

Thanks..

John-

 

1 Solution
cdurkin_FTNT
Staff
Staff

Unfortunately any change to the description of a System out the box rule, will force the user to save the modified rule as a clone.

 

FYI: The correct reference for that rule is 

https://github.com/SigmaHQ/sigma/blob/master/rules/windows/builtin/security/win_security_dpapi_domai...

 

 

View solution in original post

1 REPLY 1
cdurkin_FTNT
Staff
Staff

Unfortunately any change to the description of a System out the box rule, will force the user to save the modified rule as a clone.

 

FYI: The correct reference for that rule is 

https://github.com/SigmaHQ/sigma/blob/master/rules/windows/builtin/security/win_security_dpapi_domai...

 

 

Announcements

Welcome to your new Fortinet Community!

You'll find your previous forum posts under "Forums"