Merge pull request #3320 from redsand/reduce_level_time_modification

Reducing to a low level, as this is not a single indicator of comprom…
This commit is contained in:
Florian Roth
2022-08-03 18:13:44 +02:00
committed by GitHub
@@ -8,7 +8,7 @@ references:
- Live environment caused by malware
- https://docs.microsoft.com/en-us/windows/security/threat-protection/auditing/event-4616
date: 2019/02/05
modified: 2022/04/06
modified: 2022/08/03
logsource:
product: windows
service: security
@@ -27,7 +27,7 @@ detection:
condition: selection and not 1 of filter*
falsepositives:
- HyperV or other virtualization technologies with binary not listed in filter portion of detection
level: medium
level: low
tags:
- attack.defense_evasion
- attack.t1070.006