From 4f7c6ff84ddd6705f0c7dc7cd45c8fb4a454eb55 Mon Sep 17 00:00:00 2001 From: tccontre <26181693+tccontre@users.noreply.github.com> Date: Wed, 14 Jul 2021 10:20:11 +0200 Subject: [PATCH] Update process_kill_base_on_file_path.yml --- detections/endpoint/process_kill_base_on_file_path.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/detections/endpoint/process_kill_base_on_file_path.yml b/detections/endpoint/process_kill_base_on_file_path.yml index 965788b2cd..d6a4a57d6d 100644 --- a/detections/endpoint/process_kill_base_on_file_path.yml +++ b/detections/endpoint/process_kill_base_on_file_path.yml @@ -47,9 +47,9 @@ tags: - Processes.process_id security_domain: endpoint impact: 70 - confidence: 75 + confidence: 80 # (impact * confidence)/100 - risk_score: 52.5 + risk_score: 56 context: - source:endpoint - stage: Defense Evasion