From 41fb7257cd57d5122d04cce3cc530377bbfa42e2 Mon Sep 17 00:00:00 2001
From: tccontre <26181693+tccontre@users.noreply.github.com>
Date: Tue, 28 Feb 2023 10:49:16 +0100
Subject: [PATCH] Update suspicious_process_file_path.yml

minor fix for wrong name in observable fields.
---
 detections/endpoint/suspicious_process_file_path.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/detections/endpoint/suspicious_process_file_path.yml b/detections/endpoint/suspicious_process_file_path.yml
index 4c86863b05..66ff71c302 100644
--- a/detections/endpoint/suspicious_process_file_path.yml
+++ b/detections/endpoint/suspicious_process_file_path.yml
@@ -73,7 +73,7 @@ tags:
     type: Endpoint
     role:
     - Victim
-  - name: Processes.process_path.file_path
+  - name: Processes.process_path
     type: File Name
     role:
     - Attacker