From 2d09f571ba1e85bc4a72d9da7b7328ab65cd63fe Mon Sep 17 00:00:00 2001
From: Steven Dick <38897662+nterl0k@users.noreply.github.com>
Date: Fri, 31 Jan 2025 15:27:08 -0500
Subject: [PATCH] Update o365_email_hard_delete_excessive_volume.yml

---
 detections/cloud/o365_email_hard_delete_excessive_volume.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/detections/cloud/o365_email_hard_delete_excessive_volume.yml b/detections/cloud/o365_email_hard_delete_excessive_volume.yml
index 9c0f857a8d..a1c85790c0 100644
--- a/detections/cloud/o365_email_hard_delete_excessive_volume.yml
+++ b/detections/cloud/o365_email_hard_delete_excessive_volume.yml
@@ -37,7 +37,7 @@ drilldown_searches:
   earliest_offset: $info_min_time$
   latest_offset: $info_max_time$
 rba:
-  message: message: The user $user$ deleted an excessing number of emails [$count$] within a short timeframe
+  message: The user $user$ deleted an excessing number of emails [$count$] within a short timeframe
   risk_objects:
   - field: user
     type: user