Update o365_email_send_and_hard_delete_suspicious_behavior.yml

Author: nterl0k

detections/cloud/o365_email_send_and_hard_delete_suspicious_behavior.yml

@@ -48,7 +48,7 @@ rba:
   - field: src
     type: ip_address
   - field: subject
-    type: signature
+    type: email_subject
 tags:
   analytic_story: 
   - Office 365 Account Takeover