From 4be7e99ddbd6feaa4a1ca371b86361d0b51d151b Mon Sep 17 00:00:00 2001
From: tccontre <26181693+tccontre@users.noreply.github.com>
Date: Wed, 14 Jul 2021 10:23:53 +0200
Subject: [PATCH] Update shim_database_file_creation.yml

---
 detections/endpoint/shim_database_file_creation.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/detections/endpoint/shim_database_file_creation.yml b/detections/endpoint/shim_database_file_creation.yml
index d95c91a2ae..ad1a9c0022 100644
--- a/detections/endpoint/shim_database_file_creation.yml
+++ b/detections/endpoint/shim_database_file_creation.yml
@@ -50,9 +50,9 @@ tags:
   - Filesystem.dest
   security_domain: endpoint
   impact: 70 
-  confidence: 85  
+  confidence: 80  
   # (impact * confidence)/100
-  risk_score: 59.5 
+  risk_score: 56 
   context:
   - source:endpoint
   - stage: Privilege Escalation