Update detect_remote_access_software_usage_traffic.yml

nterl0k · web-flow · commit f5160eba6f4a · 2025-02-06T08:06:29.000-05:00
diff --git a/detections/network/detect_remote_access_software_usage_traffic.yml b/detections/network/detect_remote_access_software_usage_traffic.yml
@@ -63,6 +63,9 @@ rba:
   - field: src
     type: system
     score: 25
+  - field: user
+    type: user
+    score: 25    
   threat_objects:
   - field: signature
     type: signature
