Update alerts-reference.md

Line 67: corrected supicious to suspicious

Author: ttorble

articles/security-center/alerts-reference.md

@@ -64,7 +64,7 @@ Types of alerts included in this table:
 |**Detected suspicious combination of HTA and PowerShell**|mshta.exe (Microsoft HTML Application Host) which is a signed Microsoft binary is being used by the attackers to launch malicious PowerShell commands.  Attackers often resort to having a HTA file with inline VBScript.  When a victim browses to the HTA file and chooses to run it, the PowerShell commands and scripts that it contains are executed. Analysis of host data on %{Compromised Host} detected mshta.exe launching PowerShell commands.|-|
 |**Detected suspicious commandline arguments**|Analysis of host data on %{Compromised Host} detected suspicious commandline arguments that have been used in conjunction with a reverse shell used by activity group HYDROGEN.|-|
 |**Detected suspicious commandline used to start all executables in a directory**|Analysis of host data has detected a suspicious process running on %{Compromised Host}. The commandline indicates an attempt to start all executables (*.exe) that may reside in a directory. This could be an indication of a compromised host.|-|
-|**Detected suspicious credentials in commandline**|Analysis of host data on %{Compromised Host} detected a supicious password being used to execute a file by activity group BORON. This activity group has been known to use this password to execute Pirpi malware on a victim host.|-|
+|**Detected suspicious credentials in commandline**|Analysis of host data on %{Compromised Host} detected a suspicious password being used to execute a file by activity group BORON. This activity group has been known to use this password to execute Pirpi malware on a victim host.|-|
 |**Detected suspicious document credentials**|Analysis of host data on %{Compromised Host} detected a suspicious, common precomputed password hash used by malware being used to execute a file. Activity group HYDROGEN has been known to use this password to execute malware on a victim host.|-|
 |**Detected suspicious execution of VBScript.Encode command**|Analysis of host data on %{Compromised Host} detected the execution of VBScript.Encode command. This encodes the scripts into unreadable text, making it more difficult for users to examine the code. Microsoft threat research shows that attackers often use encoded VBscript files as part of their attack to evade detection systems. This could be legitimate activity, or an indication of a compromised host.|-|
 |**Detected suspicious execution via rundll32.exe**|Analysis of host data on %{Compromised Host} detected rundll32.exe being used to execute a process with an uncommon name, consistent with the process naming scheme previously seen used by activity group GOLD when installing their first stage implant on a compromised host.|-|
@@ -338,4 +338,4 @@ To learn more about alerts, see the following:
 
 * [Security alerts in Azure Security Center](security-center-alerts-overview.md)
 * [Manage and respond to security alerts in Azure Security Center](security-center-managing-and-responding-alerts.md)
-* [Export security alerts and recommendations (Preview)](continuous-export.md)
+* [Export security alerts and recommendations (Preview)](continuous-export.md)