Update rules/integrations/azure/impact_azure_compute_restore_point_collection_deleted.toml

terrancedejesus · web-flow · commit af6d44ab8870 · 2025-10-16T14:54:13.000-04:00
diff --git a/rules/integrations/azure/impact_azure_compute_restore_point_collection_deleted.toml b/rules/integrations/azure/impact_azure_compute_restore_point_collection_deleted.toml
@@ -66,7 +66,7 @@ indicate unauthorized activity or a compromised account.
 references = [
     "https://www.microsoft.com/en-us/security/blog/2023/07/25/storm-0501-ransomware-attacks-expanding-to-hybrid-cloud-environments/",
 ]
-risk_score = 47
+risk_score = 73
 rule_id = "c1a3e2f0-8a1b-11ef-9b4a-f661ea17fbce"
 severity = "high"
 tags = [

Original file line number	Diff line number	Diff line change
`@@ -66,7 +66,7 @@ indicate unauthorized activity or a compromised account.`
`66`	`66`	`references = [`
`67`	`67`	`"https://www.microsoft.com/en-us/security/blog/2023/07/25/storm-0501-ransomware-attacks-expanding-to-hybrid-cloud-environments/",`
`68`	`68`	`]`
`69`		`-risk_score = 47`
	`69`	`+risk_score = 73`
`70`	`70`	`rule_id = "c1a3e2f0-8a1b-11ef-9b4a-f661ea17fbce"`
`71`	`71`	`severity = "high"`
`72`	`72`	`tags = [`