Update proc_creation_win_pua_adfind_enumeration.yml

SigmaHQ · Feb 26, 2025 · 218f74c · 218f74c
1 parent 7fc8e39
commit 218f74c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rules/windows/process_creation/proc_creation_win_pua_adfind_enumeration.yml b/rules/windows/process_creation/proc_creation_win_pua_adfind_enumeration.yml
@@ -48,4 +48,4 @@ detection:
     condition: 1 of selection_*
 falsepositives:
     - Authorized administrative activity
-level: high
+level: medium