diff --git a/detections/endpoint/process_kill_base_on_file_path.yml b/detections/endpoint/process_kill_base_on_file_path.yml index 965788b2cd..d6a4a57d6d 100644 --- a/detections/endpoint/process_kill_base_on_file_path.yml +++ b/detections/endpoint/process_kill_base_on_file_path.yml @@ -47,9 +47,9 @@ tags: - Processes.process_id security_domain: endpoint impact: 70 - confidence: 75 + confidence: 80 # (impact * confidence)/100 - risk_score: 52.5 + risk_score: 56 context: - source:endpoint - stage: Defense Evasion