From edd652e7239ba4fd4a61f34199f43fa6fafbbd2f Mon Sep 17 00:00:00 2001
From: tccontre <26181693+tccontre@users.noreply.github.com>
Date: Thu, 13 Jan 2022 17:54:25 +0100
Subject: [PATCH] Update
 linux_possible_access_or_modification_of_sshd_config_file.yml

---
 ...inux_possible_access_or_modification_of_sshd_config_file.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/detections/endpoint/linux_possible_access_or_modification_of_sshd_config_file.yml b/detections/endpoint/linux_possible_access_or_modification_of_sshd_config_file.yml
index bda1992328..1cc521b9a8 100644
--- a/detections/endpoint/linux_possible_access_or_modification_of_sshd_config_file.yml
+++ b/detections/endpoint/linux_possible_access_or_modification_of_sshd_config_file.yml
@@ -56,7 +56,7 @@ tags:
   confidence: 50
   risk_score: 25
   context:
-  - source:endpoint
+  - Source:Endpoint
   - stage:Privilege Escalation
   - Stage:Persistence
   message: a commandline $process$ executed on $dest$