From 902bea93143c2f4b191ffa9f215580bc16701bde Mon Sep 17 00:00:00 2001
From: Steven Dick <38897662+nterl0k@users.noreply.github.com>
Date: Fri, 31 Jan 2025 19:17:15 -0500
Subject: [PATCH] Update o365_email_new_inbox_rule_created.yml

---
 detections/cloud/o365_email_new_inbox_rule_created.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/detections/cloud/o365_email_new_inbox_rule_created.yml b/detections/cloud/o365_email_new_inbox_rule_created.yml
index 4bcb36adba..a1db177481 100644
--- a/detections/cloud/o365_email_new_inbox_rule_created.yml
+++ b/detections/cloud/o365_email_new_inbox_rule_created.yml
@@ -61,4 +61,4 @@ tests:
   attack_data:
   - data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1114/o365_suspect_email_actions/o365_exchange_suspect_events.log
     source: o365
-	sourcetype: o365:management:activity
+    sourcetype: o365:management:activity