diff --git a/detections/endpoint/office_product_writing_cab_or_inf.yml b/detections/endpoint/office_product_writing_cab_or_inf.yml index f52fc2428d..b906212777 100644 --- a/detections/endpoint/office_product_writing_cab_or_inf.yml +++ b/detections/endpoint/office_product_writing_cab_or_inf.yml @@ -2,7 +2,7 @@ name: Office Product Writing cab or inf id: f48cd1d4-125a-11ec-a447-acde48001122 version: 2 date: '2022-07-07' -author: Michael Haag, Teoderick Contreras, Splunk +author: Michael Haag, Splunk type: TTP datamodel: - Endpoint