Update o365_exfiltration_via_file_sync_download.yml

nterl0k · web-flow · commit e29b0b3f01f0 · 2025-01-28T15:58:20.000-05:00
diff --git a/detections/cloud/o365_exfiltration_via_file_sync_download.yml b/detections/cloud/o365_exfiltration_via_file_sync_download.yml
@@ -74,4 +74,4 @@ tests:
   attack_data:
   - data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1567/o365_sus_file_activity/o365_sus_file_activity.log
     source: o365
-	sourcetype: o365:management:activity
+    sourcetype: o365:management:activity
