Update detect_remote_access_software_usage_url.yml

nterl0k · web-flow · commit 41c92476b971 · 2025-02-06T08:04:38.000-05:00
diff --git a/detections/web/detect_remote_access_software_usage_url.yml b/detections/web/detect_remote_access_software_usage_url.yml
@@ -69,6 +69,8 @@ rba:
   threat_objects:
   - field: url_domain
     type: domain
+  - field: signature
+    type: signature    
 tags:
   analytic_story:
   - Insider Threat
