Skip to content

Commit 0e8ac8a

Browse files
authored
Update o365_exfiltration_via_file_download.yml
1 parent 842ee12 commit 0e8ac8a

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

detections/cloud/o365_exfiltration_via_file_download.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ rba:
4343
score: 25
4444
threat_objects:
4545
- field: src
46-
type: src
46+
type: ip_address
4747
tags:
4848
analytic_story:
4949
- Data Exfiltration

0 commit comments

Comments
 (0)