Update proc_creation_win_w32tm.yml

2022-09-27 23:52:22 +02:00
parent 58b7c910dc
commit e583d9fc39
1 changed files with 1 additions and 1 deletions
@@ -24,7 +24,7 @@ detection:
    condition: all of selection_*
 falsepositives:
    - Legitimate use
-level: medium
+level: high  # because unlikely legitimate use of that flag combination
 tags:
    - attack.discovery
    - attack.t1124