refactor: reduced level of TeamViewer rule

2022-02-08 20:40:31 +01:00
parent 047b928ab0
commit d388ce945c
1 changed files with 2 additions and 1 deletions
@@ -3,6 +3,7 @@ id: 778ba9a8-45e4-4b80-8e3e-34a419f0b85e
 description: Detects DNS queries to a TeamViewer domain only resolved by a TeamViewer client by an image that isn't named TeamViewer (sometimes used by threat actors for obfuscation)
 status: experimental
 date: 2022/01/30
+date: 2022/02/08
 author: Florian Roth
 references:
    - https://www.teamviewer.com/en-us/
@@ -23,4 +24,4 @@ detection:
 falsepositives:
    - Unknown binary names of TeamViewer
    - Other programs that also lookup the observed domain
-level: high
+level: medium