descp_fix

detections/endpoint/linux_common_process_for_elevation_control.yml

@@ -9,7 +9,7 @@ datamodel:
 description: This analytic is to look for possible elevation control access using
   a common known process in linux platform to change the attribute and file ownership.
   This technique is commonly abused by adversaries, malware author and red teamers
-  to gain persistence or privilege escalation on the target or compromised host. Tis
+  to gain persistence or privilege escalation on the target or compromised host. This
   common process is used to modify file attribute, file ownership or SUID. This tools
   can be used in legitimate purposes so filter is needed.
 search: '| tstats `security_content_summariesonly` count min(_time) as firstTime max(_time)