tighten scopes

mandiant · Oct 25, 2024 · 7acd831 · 7acd831
1 parent 125419b
commit 7acd831
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/data-manipulation/encryption/create-new-key-via-cryptacquirecontext.yml b/data-manipulation/encryption/create-new-key-via-cryptacquirecontext.yml
@@ -5,8 +5,8 @@ rule:
     authors:
       - [email protected]
     scopes:
-      static: function
-      dynamic: thread
+      static: basic block
+      dynamic: call
     att&ck:
       - Defense Evasion::Obfuscated Files or Information [T1027]
     mbc: