chore: update severity levels for chainsaw rules

wawawao · Jul 11, 2022 · 2737eef · 2737eef
1 parent b8f5511
commit 2737eef
Show file tree

Hide file tree

Showing 7 changed files with 7 additions and 7 deletions.
diff --git a/rules/antivirus/f-secure.yml b/rules/antivirus/f-secure.yml
@@ -7,7 +7,7 @@ authors:
 
 
 kind: evtx
-level: info
+level: critical
 status: stable
 timestamp: Event.System.TimeCreated
 

diff --git a/rules/antivirus/kaspersky.yml b/rules/antivirus/kaspersky.yml
@@ -7,7 +7,7 @@ authors:
 
 
 kind: evtx
-level: info
+level: critical
 status: stable
 timestamp: Event.System.TimeCreated
 

diff --git a/rules/antivirus/sophos.yml b/rules/antivirus/sophos.yml
@@ -7,7 +7,7 @@ authors:
 
 
 kind: evtx
-level: info
+level: critical
 status: stable
 timestamp: Event.System.TimeCreated
 

diff --git a/rules/antivirus/windows_defender.yml b/rules/antivirus/windows_defender.yml
@@ -7,7 +7,7 @@ authors:
 
 
 kind: evtx
-level: info
+level: critical
 status: stable
 timestamp: Event.System.TimeCreated
 

diff --git a/rules/log_tampering/security_audit_log_was_cleared.yml b/rules/log_tampering/security_audit_log_was_cleared.yml
@@ -7,7 +7,7 @@ authors:
 
 
 kind: evtx
-level: info
+level: critical
 status: stable
 timestamp: Event.System.TimeCreated
 

diff --git a/rules/log_tampering/system_log_was_cleared.yml b/rules/log_tampering/system_log_was_cleared.yml
@@ -7,7 +7,7 @@ authors:
 
 
 kind: evtx
-level: info
+level: high
 status: stable
 timestamp: Event.System.TimeCreated
 

diff --git a/rules/service_tampering/event_log.yml b/rules/service_tampering/event_log.yml
@@ -7,7 +7,7 @@ authors:
 
 
 kind: evtx
-level: info
+level: critical
 status: stable
 timestamp: Event.System.TimeCreated