Changed level of PsExec events to 'low'
This commit is contained in:
@@ -20,4 +20,4 @@ detection:
|
||||
condition: service_installation or service_execution or sysmon_processcreation
|
||||
falsepositives:
|
||||
- unknown
|
||||
level: high
|
||||
level: low
|
||||
|
||||
Reference in New Issue
Block a user