Update o365_email_receive_and_hard_delete_takeover_behavior.yml

nterl0k · web-flow · commit dd8c9d991a4a · 2025-01-31T19:34:18.000-05:00
diff --git a/detections/cloud/o365_email_receive_and_hard_delete_takeover_behavior.yml b/detections/cloud/o365_email_receive_and_hard_delete_takeover_behavior.yml
@@ -57,7 +57,7 @@ rba:
     score: 80
   threat_objects:
   - field: subject
-    type: signature
+    type: email_subject
   - field: src
     type: ip_address
 tags:
