diff --git a/detections/endpoint/suspicious_process_file_path.yml b/detections/endpoint/suspicious_process_file_path.yml index 4c86863b05..66ff71c302 100644 --- a/detections/endpoint/suspicious_process_file_path.yml +++ b/detections/endpoint/suspicious_process_file_path.yml @@ -73,7 +73,7 @@ tags: type: Endpoint role: - Victim - - name: Processes.process_path.file_path + - name: Processes.process_path type: File Name role: - Attacker