diff --git a/detections/endpoint/permission_modification_using_takeown_app.yml b/detections/endpoint/permission_modification_using_takeown_app.yml
index d558cb3c35..f55a6291bb 100644
--- a/detections/endpoint/permission_modification_using_takeown_app.yml
+++ b/detections/endpoint/permission_modification_using_takeown_app.yml
@@ -49,9 +49,9 @@ tags:
   - Processes.process_guid
   security_domain: endpoint
   impact: 70 
-  confidence: 85  
+  confidence: 80  
   # (impact * confidence)/100
-  risk_score: 59.5 
+  risk_score: 56 
   context:
   - source:endpoint
   - stage: Defense Evasion