SigmaHQ · nasbench · Oct 4, 2023 · Sep 7, 2023 · Sep 7, 2023 · Sep 7, 2023
diff --git a/...ad/driver_load_win_mal_poortry_driver.yml → ...ws/driver_load_win_mal_poortry_driver.yml b/...ad/driver_load_win_mal_poortry_driver.yml → ...ws/driver_load_win_mal_poortry_driver.yml
@@ -1,12 +1,12 @@
 title: Usage Of Malicious POORTRY Signed Driver
 id: 91bc09e7-674d-4cf5-8d86-ed5d8bdb95a6
-status: experimental
+status: deprecated
 description: Detects the load of the signed poortry driver used by UNC3944 as reported by Mandiant and Sentinel One.
 references:
     - https://www.mandiant.com/resources/blog/hunting-attestation-signed-malware
 author: Nasreddine Bencherchali (Nextron Systems)
 date: 2022/12/16
-modified: 2022/12/30
+modified: 2023/09/13
 tags:
     - attack.privilege_escalation
     - attack.t1543

diff --git a/...ad_win_vuln_avast_anti_rootkit_driver.yml → ...ad_win_vuln_avast_anti_rootkit_driver.yml b/...ad_win_vuln_avast_anti_rootkit_driver.yml → ...ad_win_vuln_avast_anti_rootkit_driver.yml
@@ -1,12 +1,12 @@
 title: Vulnerable AVAST Anti Rootkit Driver Load
 id: 7c676970-af4f-43c8-80af-ec9b49952852
-status: experimental
+status: deprecated
 description: Detects the load of a signed and vulnerable AVAST Anti Rootkit driver often used by threat actors or malware for stopping and disabling AV and EDR products
 references:
     - https://www.aon.com/cyber-solutions/aon_cyber_labs/yours-truly-signed-av-driver-weaponizing-an-antivirus-driver/
 author: Nasreddine Bencherchali (Nextron Systems)
 date: 2022/07/28
-modified: 2022/12/30
+modified: 2023/09/12
 tags:
     - attack.privilege_escalation
     - attack.t1543.003

diff --git a/...load/driver_load_win_vuln_dell_driver.yml → ...dows/driver_load_win_vuln_dell_driver.yml b/...load/driver_load_win_vuln_dell_driver.yml → ...dows/driver_load_win_vuln_dell_driver.yml
@@ -1,12 +1,12 @@
 title: Vulnerable Dell BIOS Update Driver Load
 id: 21b23707-60d6-41bb-96e3-0f0481b0fed9
-status: experimental
+status: deprecated
 description: Detects the load of the vulnerable Dell BIOS update driver as reported in CVE-2021-21551
 references:
     - https://labs.sentinelone.com/cve-2021-21551-hundreds-of-millions-of-dell-computers-at-risk-due-to-multiple-bios-driver-privilege-escalation-flaws/
 author: Florian Roth (Nextron Systems)
 date: 2021/05/05
-modified: 2022/12/30
+modified: 2023/09/12
 tags:
     - attack.privilege_escalation
     - cve.2021.21551