diff --git a/tools/sigma/backends/hawk.py b/tools/sigma/backends/hawk.py index d5ab6c1bb..7b04b76c9 100644 --- a/tools/sigma/backends/hawk.py +++ b/tools/sigma/backends/hawk.py @@ -685,7 +685,8 @@ class HAWKBackend(SingleTextQueryBackend): elif self.sigmaparser.parsedyaml['level'].lower() == 'high': record['correlation_action'] += 10.0; elif self.sigmaparser.parsedyaml['level'].lower() == 'medium': - record['correlation_action'] += 5.0; + # record['correlation_action'] += 0.0; + pass elif self.sigmaparser.parsedyaml['level'].lower() == 'low': record['correlation_action'] -= 10.0; elif self.sigmaparser.parsedyaml['level'].lower() == 'informational':