Update o365_sharepoint_suspicious_search_behavior.yml

nterl0k · web-flow · commit 9eac24221c46 · 2025-01-08T15:21:40.000-05:00
diff --git a/detections/cloud/o365_sharepoint_suspicious_search_behavior.yml b/detections/cloud/o365_sharepoint_suspicious_search_behavior.yml
@@ -70,4 +70,4 @@ tests:
   attack_data:
   - data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1213.002/o365_sus_sharepoint_search/o365_sus_sharepoint_search.log
     source: o365
-	sourcetype: o365:management:activity
+    sourcetype: o365:management:activity
