updating risk

patel-bhavin · patel-bhavin · commit c4d5915f22c0 · 2025-01-07T12:14:10.000-08:00
diff --git a/detections/cloud/azure_ad_azurehound_useragent_detected.yml b/detections/cloud/azure_ad_azurehound_useragent_detected.yml
@@ -42,7 +42,7 @@ tags:
   - T1087.004
   - T1526
   observable:
-  - name: user
+  - name: tenantId
     type: User
     role:
     - Victim
diff --git a/detections/cloud/azure_ad_service_principal_enumeration.yml b/detections/cloud/azure_ad_service_principal_enumeration.yml
@@ -51,7 +51,7 @@ tags:
     type: IP Address
     role:
     - Attacker
-  - name: user
+  - name: tenantId
     type: User
     role:
     - Victim
