Skip to content

Commit 629a2ef

Browse files
authored
Merge pull request #30 from kevinelwell/patch-1
Update README.md
2 parents b4d79c6 + b95f4b0 commit 629a2ef

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

README.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@ E.g. If you want to write a simple test case for "privilege escalation", that us
5656

5757
### Tool and File Extraction
5858

59-
If you script includes a tool, web shell, auxiliary or output file, place them in the folders `./toolset` or `./workfiles`. Running the build script `build_pack.bat` will include them in the encrypted archives `enc-toolset.7z` and `enc-files.7z`.
59+
If your script includes a tool, web shell, auxiliary or output file, place them in the folders `./toolset` or `./workfiles`. Running the build script `build_pack.bat` will include them in the encrypted archives `enc-toolset.7z` and `enc-files.7z`.
6060

6161
#### Extract a Tool
6262

@@ -110,7 +110,7 @@ The following table shows the different test cases and the expected detection re
110110

111111
## Cobalt Strike Beacon Activity
112112

113-
You should see be able to find events in your security monitoring solution (SIEM, EDR etc.) for the following keywords:
113+
You should now be able to find events in your security monitoring solution (SIEM, EDR etc.) for the following keywords:
114114

115115
### Named Pipes
116116

0 commit comments

Comments
 (0)