From fecfefee7631a8043eed7fd91763300dc8f2f72c Mon Sep 17 00:00:00 2001
From: tccontre <tccontre18@gmail.com>
Date: Thu, 13 Feb 2025 13:12:40 +0100
Subject: [PATCH] headless_bee

---
 .../endpoint/windows_svchost_exe_parent_process_anomaly.yml     | 2 --
 1 file changed, 2 deletions(-)

diff --git a/detections/endpoint/windows_svchost_exe_parent_process_anomaly.yml b/detections/endpoint/windows_svchost_exe_parent_process_anomaly.yml
index 3dba44623a..fdb0e2decb 100644
--- a/detections/endpoint/windows_svchost_exe_parent_process_anomaly.yml
+++ b/detections/endpoint/windows_svchost_exe_parent_process_anomaly.yml
@@ -55,8 +55,6 @@ rba:
   threat_objects:
   - field: parent_process_name
     type: parent_process_name
-  - field: process_name
-    type: process_name
 tags:
   analytic_story:
   - SnappyBee