From 217e6b1190cc6df373c0a66859bcd80773eb56a3 Mon Sep 17 00:00:00 2001
From: smazzucco <60650158+smazzucco@users.noreply.github.com>
Date: Wed, 19 May 2021 16:15:58 +0200
Subject: [PATCH] TERNA PR3 - Update machinev1
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Proposal to add the words “and connection” to include also repeated remote connection tentative to URL (intranet and/or file shares).
---
 working_copy/machinev1 | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/working_copy/machinev1 b/working_copy/machinev1
index 9c72a38..a6a70ef 100644
--- a/working_copy/machinev1
+++ b/working_copy/machinev1
@@ -73,8 +73,8 @@
           "value": "ids-alert"
         },
         {
-          "description": "Multiple brute-force login attempts (including guessing or cracking of passwords). This IOC refers to a resource, which has been observed to perform brute-force attacks over a given application protocol.",
-          "expanded": "Login Attempts",
+          "description": "Multiple brute-force login and connection attempts (including guessing or cracking of passwords). This IOC refers to a resource, which has been observed to perform brute-force attacks over a given application protocol.",
+          "expanded": "Login and Connection Attempts",
           "value": "brute-force"
         },
         {