Update proc_creation_win_pua_adfind_enumeration.yml

swachchhanda000 · web-flow · commit 218f74cfefc9 · 2025-02-26T16:37:22.000+05:45
diff --git a/rules/windows/process_creation/proc_creation_win_pua_adfind_enumeration.yml b/rules/windows/process_creation/proc_creation_win_pua_adfind_enumeration.yml
@@ -48,4 +48,4 @@ detection:
     condition: 1 of selection_*
 falsepositives:
     - Authorized administrative activity
-level: high
+level: medium
