From fe570f7f2f3119bc9bfebe7eb352f68b60932979 Mon Sep 17 00:00:00 2001
From: tccontre <26181693+tccontre@users.noreply.github.com>
Date: Wed, 14 Jul 2021 10:18:55 +0200
Subject: [PATCH] Update permission_modification_using_takeown_app.yml

---
 .../endpoint/permission_modification_using_takeown_app.yml    | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/detections/endpoint/permission_modification_using_takeown_app.yml b/detections/endpoint/permission_modification_using_takeown_app.yml
index d558cb3c35..f55a6291bb 100644
--- a/detections/endpoint/permission_modification_using_takeown_app.yml
+++ b/detections/endpoint/permission_modification_using_takeown_app.yml
@@ -49,9 +49,9 @@ tags:
   - Processes.process_guid
   security_domain: endpoint
   impact: 70 
-  confidence: 85  
+  confidence: 80  
   # (impact * confidence)/100
-  risk_score: 59.5 
+  risk_score: 56 
   context:
   - source:endpoint
   - stage: Defense Evasion