diff --git a/detections/endpoint/suspicious_process_file_path.yml b/detections/endpoint/suspicious_process_file_path.yml index 8b764c53f3..ec7e8118c2 100644 --- a/detections/endpoint/suspicious_process_file_path.yml +++ b/detections/endpoint/suspicious_process_file_path.yml @@ -73,7 +73,7 @@ tags: role: - Victim - name: Processes.process_path - type: File Name + type: Location role: - Attacker product: