Update o365_email_password_and_payroll_compromise_behavior.yml

nterl0k · web-flow · commit b4bfb8c3adb0 · 2025-02-14T09:25:25.000-05:00
diff --git a/detections/cloud/o365_email_password_and_payroll_compromise_behavior.yml b/detections/cloud/o365_email_password_and_payroll_compromise_behavior.yml
@@ -67,10 +67,8 @@ tags:
   - Data Destruction
   asset_type: O365 Tenant  
   mitre_attack_id: 
-  - T1114
   - T1070.008
   - T1485
-  - T1070
   - T1114.001
   product: 
   - Splunk Enterprise
