Update detect_remote_access_software_usage_traffic.yml

Fix bug with user field

Author: jwindley

detections/network/detect_remote_access_software_usage_traffic.yml

@@ -16,7 +16,7 @@ description: The following analytic detects network traffic associated with know
 data_source:
 - Palo Alto Network Traffic
 search: '| tstats `security_content_summariesonly` count min(_time) as firstTime max(_time)
-  as lastTime values(All_Traffic.dest_port) as dest_port latest(user) as user from
+  as lastTime values(All_Traffic.dest_port) as dest_port latest(All_Traffic.user) as user from
   datamodel=Network_Traffic by All_Traffic.action All_Traffic.app All_Traffic.bytes
   All_Traffic.bytes_in All_Traffic.bytes_out All_Traffic.dest All_Traffic.dest_ip
   All_Traffic.dest_port All_Traffic.dvc All_Traffic.protocol All_Traffic.protocol_version