docs: changed wording in rule descriptions

stboissdev · Nov 27, 2021 · 91c83bb · 91c83bb
1 parent b1ee26c
commit 91c83bb
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/...orted/sysmon_always_install_elevated_msi_spawned_cmd_and_powershell_spawned_processes.yml b/...orted/sysmon_always_install_elevated_msi_spawned_cmd_and_powershell_spawned_processes.yml
@@ -1,6 +1,6 @@
 title: MSI Spawned Cmd and Powershell Spawned Processes
 id: 38cf8340-461b-4857-bf99-23a41f772b18
-description: This rule will looks for Windows Installer service (msiexec.exe) spawned command line and/or powershell that spawned other processes
+description: This rule looks for Windows Installer service (msiexec.exe) spawning command line and/or powershell that spawns other processes
 status: unsupported
 author: Teymur Kheirkhabarov (idea), Mangatas Tondang (rule), oscd.community
 date: 2020/10/13

diff --git a/...indows/process_creation/sysmon_always_install_elevated_msi_spawned_cmd_and_powershell.yml b/...indows/process_creation/sysmon_always_install_elevated_msi_spawned_cmd_and_powershell.yml
@@ -1,6 +1,6 @@
 title: Always Install Elevated MSI Spawned Cmd And Powershell
 id: 1e53dd56-8d83-4eb4-a43e-b790a05510aa
-description: This rule will looks for Windows Installer service (msiexec.exe) spawned command line and/or powershell
+description: This rule looks for Windows Installer service (msiexec.exe) spawned command line and/or powershell
 status: experimental
 author: Teymur Kheirkhabarov (idea), Mangatas Tondang (rule), oscd.community
 date: 2020/10/13

diff --git a/rules/windows/process_creation/sysmon_always_install_elevated_windows_installer.yml b/rules/windows/process_creation/sysmon_always_install_elevated_windows_installer.yml
@@ -1,6 +1,6 @@
 title: Always Install Elevated Windows Installer 
 id: cd951fdc-4b2f-47f5-ba99-a33bf61e3770
-description: This rule will looks for Windows Installer service (msiexec.exe) when it tries to install MSI packages with SYSTEM privilege 
+description: This rule looks for Windows Installer service (msiexec.exe) trying to install MSI packages with SYSTEM privilege 
 status: experimental
 author: Teymur Kheirkhabarov (idea), Mangatas Tondang (rule), oscd.community
 date: 2020/10/13