Updatedtactic

Azure · Jul 10, 2024 · 854dbd5 · 854dbd5
1 parent 437327b
commit 854dbd5
Show file tree

Hide file tree

Showing 10 changed files with 10 additions and 10 deletions.
diff --git a/Solutions/Threat Intelligence/Analytic Rules/DomainEntity_EmailEvents.yaml b/Solutions/Threat Intelligence/Analytic Rules/DomainEntity_EmailEvents.yaml
@@ -21,7 +21,7 @@ queryPeriod: 14d
 triggerOperator: gt
 triggerThreshold: 0
 tactics:
-  - Initial Access
+  - InitialAccess
 relevantTechniques:
   - T1566
 query: |

diff --git a/Solutions/Threat Intelligence/Analytic Rules/DomainEntity_EmailUrlInfo.yaml b/Solutions/Threat Intelligence/Analytic Rules/DomainEntity_EmailUrlInfo.yaml
@@ -21,7 +21,7 @@ queryPeriod: 14d
 triggerOperator: gt
 triggerThreshold: 0
 tactics:
-  - Initial Access
+  - InitialAccess
 relevantTechniques:
   - T1566
 query: |

diff --git a/Solutions/Threat Intelligence/Analytic Rules/EmailEntity_AzureActivity.yaml b/Solutions/Threat Intelligence/Analytic Rules/EmailEntity_AzureActivity.yaml
@@ -21,7 +21,7 @@ queryPeriod: 14d
 triggerOperator: gt
 triggerThreshold: 0
 tactics:
-  - Initial Access
+  - InitialAccess
 relevantTechniques:
   - T1566
 query: |

diff --git a/Solutions/Threat Intelligence/Analytic Rules/EmailEntity_CloudAppEvents.yaml b/Solutions/Threat Intelligence/Analytic Rules/EmailEntity_CloudAppEvents.yaml
@@ -15,7 +15,7 @@ queryPeriod: 14d
 triggerOperator: gt
 triggerThreshold: 0
 tactics:
-  - Initial Access
+  - InitialAccess
 relevantTechniques:
   - T1566
 query: |

diff --git a/Solutions/Threat Intelligence/Analytic Rules/EmailEntity_EmailEvents.yaml b/Solutions/Threat Intelligence/Analytic Rules/EmailEntity_EmailEvents.yaml
@@ -21,7 +21,7 @@ queryPeriod: 14d
 triggerOperator: gt
 triggerThreshold: 0
 tactics:
-  - Initial Access
+  - InitialAccess
 relevantTechniques:
   - T1566
 query: |

diff --git a/Solutions/Threat Intelligence/Analytic Rules/EmailEntity_OfficeActivity.yaml b/Solutions/Threat Intelligence/Analytic Rules/EmailEntity_OfficeActivity.yaml
@@ -21,7 +21,7 @@ queryPeriod: 14d
 triggerOperator: gt
 triggerThreshold: 0
 tactics:
-  - Initial Access
+  - InitialAccess
 relevantTechniques:
   - T1566
 query: |

diff --git a/Solutions/Threat Intelligence/Analytic Rules/EmailEntity_PaloAlto.yaml b/Solutions/Threat Intelligence/Analytic Rules/EmailEntity_PaloAlto.yaml
@@ -21,7 +21,7 @@ queryPeriod: 14d
 triggerOperator: gt
 triggerThreshold: 0
 tactics:
-  - Initial Access
+  - InitialAccess
 relevantTechniques:
   - T1566
 query: |

diff --git a/Solutions/Threat Intelligence/Analytic Rules/EmailEntity_SecurityAlert.yaml b/Solutions/Threat Intelligence/Analytic Rules/EmailEntity_SecurityAlert.yaml
@@ -21,7 +21,7 @@ queryPeriod: 14d
 triggerOperator: gt
 triggerThreshold: 0
 tactics:
-  - Initial Access
+  - InitialAccess
 relevantTechniques:
   - T1566
 query: |

diff --git a/Solutions/Threat Intelligence/Analytic Rules/EmailEntity_SecurityEvent.yaml b/Solutions/Threat Intelligence/Analytic Rules/EmailEntity_SecurityEvent.yaml
@@ -27,7 +27,7 @@ queryPeriod: 14d
 triggerOperator: gt
 triggerThreshold: 0
 tactics:
-  - Initial Access
+  - InitialAccess
 relevantTechniques:
   - T1566
 query: |

diff --git a/Solutions/Threat Intelligence/Analytic Rules/EmailEntity_SigninLogs.yaml b/Solutions/Threat Intelligence/Analytic Rules/EmailEntity_SigninLogs.yaml
@@ -24,7 +24,7 @@ queryPeriod: 14d
 triggerOperator: gt
 triggerThreshold: 0
 tactics:
-  - Initial Access
+  - InitialAccess
 relevantTechniques:
   - T1566
 query: |