From 8d8dc2e529ce83ffcefd951c394a400da5387b35 Mon Sep 17 00:00:00 2001
From: Patrick Bareiss <pbareiss@splunk.com>
Date: Tue, 17 Dec 2024 10:22:59 +0100
Subject: [PATCH] bug fix

---
 detections/cloud/asl_aws_disable_bucket_versioning.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/detections/cloud/asl_aws_disable_bucket_versioning.yml b/detections/cloud/asl_aws_disable_bucket_versioning.yml
index c72b258841..37abd078c7 100644
--- a/detections/cloud/asl_aws_disable_bucket_versioning.yml
+++ b/detections/cloud/asl_aws_disable_bucket_versioning.yml
@@ -43,7 +43,7 @@ tags:
   - name: user
     type: User
     role:
-    - Attacker
+    - Victim
   - name: src_ip
     type: IP Address
     role: