From 919063d5fe86ec6ebfe476da6b3fa484e2bb932f Mon Sep 17 00:00:00 2001
From: Michael Haag <5632822+MHaggis@users.noreply.github.com>
Date: Fri, 11 Nov 2022 18:06:04 -0700
Subject: [PATCH] context

---
 .../experimental/network/ssl_certificates_with_punycode.yml     | 2 +-
 .../network/zeek_x509_certificate_with_punycode.yml             | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/detections/experimental/network/ssl_certificates_with_punycode.yml b/detections/experimental/network/ssl_certificates_with_punycode.yml
index 9d89ada1e2..187241d58c 100644
--- a/detections/experimental/network/ssl_certificates_with_punycode.yml
+++ b/detections/experimental/network/ssl_certificates_with_punycode.yml
@@ -34,7 +34,7 @@ tags:
   - CIS 16
   confidence: 30
   context:
-  - Network
+  - Source:IPS
   dataset: []
   impact: 50
   kill_chain_phases:
diff --git a/detections/experimental/network/zeek_x509_certificate_with_punycode.yml b/detections/experimental/network/zeek_x509_certificate_with_punycode.yml
index cdf2267d75..36dee9950c 100644
--- a/detections/experimental/network/zeek_x509_certificate_with_punycode.yml
+++ b/detections/experimental/network/zeek_x509_certificate_with_punycode.yml
@@ -32,7 +32,7 @@ tags:
   - CIS 16
   confidence: 30
   context:
-  - Network
+  - Source:IPS
   dataset: []
   impact: 50
   kill_chain_phases: