From e838a1acc4d6eecea505d6df502bb1fab8fe6502 Mon Sep 17 00:00:00 2001 From: Florian Roth Date: Sat, 17 Jul 2021 09:50:11 +0200 Subject: [PATCH] increased level --- rules/windows/powershell/powershell_adrecon_execution.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/windows/powershell/powershell_adrecon_execution.yml b/rules/windows/powershell/powershell_adrecon_execution.yml index 80f167f6..f041ac68 100644 --- a/rules/windows/powershell/powershell_adrecon_execution.yml +++ b/rules/windows/powershell/powershell_adrecon_execution.yml @@ -24,4 +24,4 @@ detection: condition: selection falsepositives: - Unknown -level: medium \ No newline at end of file +level: high