mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
Update o365_email_new_inbox_rule_created.yml
This commit is contained in:
@@ -61,4 +61,4 @@ tests:
|
||||
attack_data:
|
||||
- data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1114/o365_suspect_email_actions/o365_exchange_suspect_events.log
|
||||
source: o365
|
||||
sourcetype: o365:management:activity
|
||||
sourcetype: o365:management:activity
|
||||
|
||||
Reference in New Issue
Block a user