Update detect_remote_access_software_usage_dns.yml

nterl0k · web-flow · commit 8d3da805575c · 2025-02-06T08:05:27.000-05:00
diff --git a/detections/network/detect_remote_access_software_usage_dns.yml b/detections/network/detect_remote_access_software_usage_dns.yml
@@ -65,6 +65,8 @@ rba:
   threat_objects:
   - field: query
     type: domain
+  - field: signature
+    type: signature
 tags:
   analytic_story:
   - Insider Threat
