From d2679acf0682086e88053a867f5284b1c344774d Mon Sep 17 00:00:00 2001 From: Charles LE REUN <77982369+CharlesLR-sekoia@users.noreply.github.com> Date: Tue, 2 Jul 2024 12:27:01 +0200 Subject: [PATCH] Update best_practices.md --- docs/getting_started/best_practices.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/getting_started/best_practices.md b/docs/getting_started/best_practices.md index 063824db57..9fce84ffba 100644 --- a/docs/getting_started/best_practices.md +++ b/docs/getting_started/best_practices.md @@ -22,7 +22,7 @@ Our extensive catalog of over 900 rules, each [associated with a TTP from the MI - **Aim for continuous improvement**, reaching an average of: - 10% tuning for level 3 rules with at least 1 alert-filter, - - 20% tuning for level 4 rules with at least Z alert filters. + - 20% tuning for level 4 rules with at least 1 alert-filter. ### Intakes Configuration