Update network_legitdomainabuse.py

CAPESandbox · Aug 24, 2024 · 83d9078 · 83d9078
1 parent cd2c2c2
commit 83d9078
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/signatures/windows/network_legitdomainabuse.py b/modules/signatures/windows/network_legitdomainabuse.py
@@ -19,7 +19,7 @@ class LegitDomainAbuse(Signature):
     name = "legitimate_domain_abuse"
     description = "Connection to a legitimate domain from an unexpected process"
     severity = 2
-    categories = ["living-off-trusted-sites"]
+    categories = ["network", "living-off-trusted-sites"]
     authors = ["Kevin Ross"]
     minimum = "1.3"
     evented = True