Skip to content

Commit 2154f24

Browse files
committed
Update Documents
1 parent e85cd63 commit 2154f24

File tree

3 files changed

+9
-9
lines changed

3 files changed

+9
-9
lines changed

rules/README.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -316,7 +316,7 @@
316316

317317
## Suspicious.ScriptHost.A
318318

319-
状态:启用
319+
状态:未启用
320320

321321
行为描述:源程序`*\?script.exe`做出以下操作时,提示用户处理
322322
- 对路径为`*\Windows\Sys?????\*.exe`的程序进行`执行`操作
@@ -326,12 +326,12 @@
326326

327327
## Suspicious.ScriptHost.B
328328

329-
状态:启用
329+
状态:未启用
330330

331331
行为描述:源程序`*\Windows\Sys?????\*.exe`做出以下操作时,提示用户处理
332332
- 对路径为`*\?script.exe`的程序进行`执行`操作
333333

334-
***rule.json hash: 7692734f67bdef45c360f5d4b04da6d64141543e16f47214a7b005f3094a3fe9***
334+
***rule.json hash: 061537b93cbecde04566066386b7a4b439858368c67b85da717ca23251fd4d14***
335335
# Suspicious.SuspProcAddAutoRun
336336

337337
## Suspicious.SuspProcAddAutoRun.A

rules/README_en_us.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -339,7 +339,7 @@ When the source process`*\Windows\Sys?????\>`initializes the following actions,
339339

340340
## Suspicious.ScriptHost.A
341341

342-
Status: Enabled
342+
Status: Disabled
343343

344344
Behavioral Description:
345345
When the source process`*\?script.exe`initializes the following actions, HIPS module should let the user decide them.
@@ -350,13 +350,13 @@ When the source process`*\?script.exe`initializes the following actions, HIPS mo
350350

351351
## Suspicious.ScriptHost.B
352352

353-
Status: Enabled
353+
Status: Disabled
354354

355355
Behavioral Description:
356356
When the source process`*\Windows\Sys?????\*.exe`initializes the following actions, HIPS module should let the user decide them.
357357
- `Execute` the program under the path `*\?script.exe`
358358

359-
***rule.json hash: 7692734f67bdef45c360f5d4b04da6d64141543e16f47214a7b005f3094a3fe9***
359+
***rule.json hash: 061537b93cbecde04566066386b7a4b439858368c67b85da717ca23251fd4d14***
360360
# Suspicious.SuspProcAddAutoRun
361361

362362
## Suspicious.SuspProcAddAutoRun.A

rules/README_zh_tw.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -316,7 +316,7 @@
316316

317317
## Suspicious.ScriptHost.A
318318

319-
狀態:啟用
319+
狀態:未啟用
320320

321321
行為描述:源程式`*\?script.exe`做出以下操作時,提示使用者處理
322322
- 對路徑為`*\Windows\Sys?????\*.exe`的程序進行`執行`操作
@@ -326,12 +326,12 @@
326326

327327
## Suspicious.ScriptHost.B
328328

329-
狀態:啟用
329+
狀態:未啟用
330330

331331
行為描述:源程式`*\Windows\Sys?????\*.exe`做出以下操作時,提示使用者處理
332332
- 對路徑為`*\?script.exe`的程序進行`執行`操作
333333

334-
***rule.json hash: 7692734f67bdef45c360f5d4b04da6d64141543e16f47214a7b005f3094a3fe9***
334+
***rule.json hash: 061537b93cbecde04566066386b7a4b439858368c67b85da717ca23251fd4d14***
335335
# Suspicious.SuspProcAddAutoRun
336336

337337
## Suspicious.SuspProcAddAutoRun.A

0 commit comments

Comments
 (0)