LoFP / t1070.006

t1070.006

Title	Tags
admin changing date of files.	t1070 t1070.006 linux sigma
changes made to or by the local ntp service	t1070 t1070.006 windows sigma
hyperv or other virtualization technologies with binary not listed in filter portion of detection	t1070 t1070.006 windows sigma
legitimate admin script	t1070 t1070.006 t1112 t1562 t1562.001 windows sigma