diff --git a/detections/endpoint/windows_service_deletion_in_registry.yml b/detections/endpoint/windows_service_deletion_in_registry.yml index 79b74ad9c2..3488fefd77 100644 --- a/detections/endpoint/windows_service_deletion_in_registry.yml +++ b/detections/endpoint/windows_service_deletion_in_registry.yml @@ -39,7 +39,7 @@ tags: - Stage:Defense Evasion dataset: - https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/malware/brute_ratel/service_deletion/sysmon.log - impact: 70 + impact: 80 kill_chain_phases: - Exploitation message: a service registry $Registry.registry_path$ was deleted in $Registry.dest$