chore: reduce rule level
This commit is contained in:
@@ -5,7 +5,7 @@ description: Detects suspicious sub processes of web server processes
|
||||
references:
|
||||
- https://www.acunetix.com/blog/articles/web-shells-101-using-php-introduction-web-shells-part-2/
|
||||
date: 2021/10/15
|
||||
modified: 2022/05/09
|
||||
modified: 2022/06/03
|
||||
author: Florian Roth
|
||||
tags:
|
||||
- attack.persistence
|
||||
@@ -39,5 +39,5 @@ detection:
|
||||
condition: selection_sub_processes and ( selection_general or selection_tomcat or selection_websphere)
|
||||
falsepositives:
|
||||
- Web applications that invoke Linux command line tools
|
||||
level: critical
|
||||
level: high
|
||||
|
||||
|
||||
Reference in New Issue
Block a user