Update o365_email_send_and_hard_delete_suspicious_behavior.yml

splunk · Feb 14, 2025 · 3ca6275 · 3ca6275
1 parent 7269bbe
commit 3ca6275
Showing 1 changed file with 0 additions and 2 deletions.
diff --git a/detections/cloud/o365_email_send_and_hard_delete_suspicious_behavior.yml b/detections/cloud/o365_email_send_and_hard_delete_suspicious_behavior.yml
@@ -57,9 +57,7 @@ tags:
   - Data Destruction
   asset_type: O365 Tenant
   mitre_attack_id: 
-  - T1114
   - T1114.001
-  - T1070
   - T1070.008
   - T1485
   product: