Update o365_email_send_and_hard_delete_suspicious_behavior.yml

nterl0k · web-flow · commit 3ca62759aa71 · 2025-02-14T09:26:45.000-05:00
diff --git a/detections/cloud/o365_email_send_and_hard_delete_suspicious_behavior.yml b/detections/cloud/o365_email_send_and_hard_delete_suspicious_behavior.yml
@@ -57,9 +57,7 @@ tags:
   - Data Destruction
   asset_type: O365 Tenant
   mitre_attack_id: 
-  - T1114
   - T1114.001
-  - T1070
   - T1070.008
   - T1485
   product: 
