From 9a8f1bb258fd724996c0f64acdb0b79c7c1d3c24 Mon Sep 17 00:00:00 2001
From: Willi Ballenthin <willi.ballenthin@gmail.com>
Date: Thu, 19 Jan 2023 14:22:14 +0100
Subject: [PATCH] whirlpool: update mbc mapping

---
 nursery/hash-data-using-whirlpool.yml | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/nursery/hash-data-using-whirlpool.yml b/nursery/hash-data-using-whirlpool.yml
index 81342bcec..22a11905f 100644
--- a/nursery/hash-data-using-whirlpool.yml
+++ b/nursery/hash-data-using-whirlpool.yml
@@ -5,10 +5,8 @@ rule:
     authors:
       - william.ballenthin@mandiant.com
     scope: function
-    att&ck:
-      - Defense Evasion::Obfuscated Files or Information [T1027]
     mbc:
-      - Defense Evasion::Obfuscated Files or Information::Encryption-Standard Algorithm [E1027.m05]
+      - Cryptography::Cryptographic Hash [C0029]
     references:
       - https://github.com/jzelinskie/whirlpool/blob/master/const.go
     #examples: