diff --git a/detections/endpoint/windows_identify_protocol_handlers.yml b/detections/endpoint/windows_identify_protocol_handlers.yml index 1e2951cc57..a0042656bc 100644 --- a/detections/endpoint/windows_identify_protocol_handlers.yml +++ b/detections/endpoint/windows_identify_protocol_handlers.yml @@ -52,7 +52,7 @@ tags: type: User role: - Victim - - name: Computer + - name: dest type: Hostname role: - Victim