Update registry_set_disable_system_restore.yml

2022-04-04 12:22:09 +02:00
parent f54e129c78
commit 4ded5e498f
1 changed files with 3 additions and 3 deletions
@@ -1,6 +1,6 @@
-title: Disable System Restore Through Registry
+title: Registry Disable System Restore 
 id: 5de03871-5d46-4539-a82d-3aa992a69a83
-description: Modify the registry to disable system restore on the computer
+description: Detects the modification of the registry to disable a system restore on the computer
 author: frack113
 date: 2022/04/04
 status: experimental
@@ -21,7 +21,7 @@ detection:
    condition: selection
 falsepositives:
    - Unknown
-level: medium
+level: high
 tags:
  - attack.impact
  - attack.t1490