diff --git a/detections/cloud/o365_exfiltration_via_file_download.yml b/detections/cloud/o365_exfiltration_via_file_download.yml
index c20775daf4..0bcffe5be7 100644
--- a/detections/cloud/o365_exfiltration_via_file_download.yml
+++ b/detections/cloud/o365_exfiltration_via_file_download.yml
@@ -39,7 +39,7 @@ tags:
   analytic_story: 
   - Data Exfiltration
   - Office 365 Account Takeover
-  asset_type: Cloud
+  asset_type: O365 Tenant
   confidence: 50
   impact: 50
   message: The user $user$ downloaded an excessive number of files [$count$] from $file_path$ using $src$