From 8dae288ff81eb387afebe20dbee2c1ecc4026169 Mon Sep 17 00:00:00 2001 From: Tim Shelton Date: Fri, 28 Jan 2022 00:24:20 +0000 Subject: [PATCH] reducing medium scores --- tools/sigma/backends/hawk.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/tools/sigma/backends/hawk.py b/tools/sigma/backends/hawk.py index d5ab6c1bb..7b04b76c9 100644 --- a/tools/sigma/backends/hawk.py +++ b/tools/sigma/backends/hawk.py @@ -685,7 +685,8 @@ class HAWKBackend(SingleTextQueryBackend): elif self.sigmaparser.parsedyaml['level'].lower() == 'high': record['correlation_action'] += 10.0; elif self.sigmaparser.parsedyaml['level'].lower() == 'medium': - record['correlation_action'] += 5.0; + # record['correlation_action'] += 0.0; + pass elif self.sigmaparser.parsedyaml['level'].lower() == 'low': record['correlation_action'] -= 10.0; elif self.sigmaparser.parsedyaml['level'].lower() == 'informational':