make the levels consistent

Yamato-Security · Nov 13, 2024 · fab2d39 · fab2d39
1 parent e96b1bb
commit fab2d39
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/...sa/builtin/Security/LogonLogoff/Logon/Sec_4625_Med_LogonFail_UserGuessing_Correlation.yml b/...sa/builtin/Security/LogonLogoff/Logon/Sec_4625_Med_LogonFail_UserGuessing_Correlation.yml
@@ -60,7 +60,7 @@ detection:
         IpAddress: "-"
     condition: selection and not filter
 falsepositives:
-level: informational
+level: medium
 ruletype: Hayabusa
 
 sample-evtx: |

diff --git a/...tin/Security/LogonLogoff/Logon/Sec_4625_Med_LogonFail_WrongPW_PW-Guessing_Correlation.yml b/...tin/Security/LogonLogoff/Logon/Sec_4625_Med_LogonFail_WrongPW_PW-Guessing_Correlation.yml
@@ -59,7 +59,7 @@ detection:
        - TargetUserName|endswith: "$"
     condition: selection and not filter
 falsepositives:
-level: informational
+level: medium
 ruletype: Hayabusa
 
 sample-evtx: |

diff --git a/...sa/builtin/Security/LogonLogoff/Logon/Sec_4648_Med_ExplicitLogon_PW-Spray_Correlation.yml b/...sa/builtin/Security/LogonLogoff/Logon/Sec_4648_Med_ExplicitLogon_PW-Spray_Correlation.yml
@@ -53,5 +53,5 @@ detection:
        - IpAddress: "-"
     condition: selection and not filter
 falsepositives:
-level: informational
+level: medium
 ruletype: Hayabusa