Skip to content

Commit d4355d3

Browse files
committed
Update initial_access_azure_o365_with_network_alert.toml
1 parent 4bfa584 commit d4355d3

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

rules/cross-platform/initial_access_azure_o365_with_network_alert.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ updated_date = "2025/04/29"
77
[rule]
88
author = ["Elastic"]
99
description = """
10-
This rule correlate Azure or Office 356 mail access successful sign-in events with network security alerts by source.ip.
10+
This rule correlate Azure or Office 356 mail successful sign-in events with network security alerts by source.ip.
1111
Adversaries may trigger some network security alerts such as reputation of other anomalies before accessing cloud resources.
1212
"""
1313
false_positives = [

0 commit comments

Comments
 (0)