Update o365_email_receive_and_hard_delete_takeover_behavior.yml

nterl0k · web-flow · commit d205b2d69e6c · 2025-02-14T09:25:51.000-05:00
diff --git a/detections/cloud/o365_email_receive_and_hard_delete_takeover_behavior.yml b/detections/cloud/o365_email_receive_and_hard_delete_takeover_behavior.yml
@@ -68,10 +68,8 @@ tags:
   - Data Destruction
   asset_type: O365 Tenant
   mitre_attack_id: 
-  - T1114
   - T1070.008
   - T1485
-  - T1070
   - T1114.001
   product: 
   - Splunk Enterprise
