Update win_susp_adfind.yml

Fear that a simple adfind.exe causes too many false positives
2024-11-07 01:45:21 +00:00 · 2020-09-26 17:02:39 +02:00 · 2020-09-26 17:02:39 +02:00 · 60795f7050
commit 60795f7050
parent dbdd758365
1 changed files with 1 additions and 1 deletions
--- a/rules/windows/process_creation/win_susp_adfind.yml
+++ b/rules/windows/process_creation/win_susp_adfind.yml
@ -25,4 +25,4 @@ detection:
    condition: selection
 falsepositives:
    - Unknown
-level: high
+level: medium