From ade5e80f9d59fa1d354e801664ac285f1f0eb89f Mon Sep 17 00:00:00 2001 From: Florian Roth Date: Tue, 27 Jul 2021 08:07:00 +0200 Subject: [PATCH] Update azure_kubernetes_events_deleted.yml --- rules/cloud/azure_kubernetes_events_deleted.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/cloud/azure_kubernetes_events_deleted.yml b/rules/cloud/azure_kubernetes_events_deleted.yml index 775c650a..b84ac76a 100644 --- a/rules/cloud/azure_kubernetes_events_deleted.yml +++ b/rules/cloud/azure_kubernetes_events_deleted.yml @@ -11,7 +11,7 @@ logsource: service: azure.activitylogs detection: selection_operation_name: - - properties.message: MICROSOFT.KUBERNETES/CONNECTEDCLUSTERS/EVENTS.K8S.IO/EVENTS/DELETE + properties.message: MICROSOFT.KUBERNETES/CONNECTEDCLUSTERS/EVENTS.K8S.IO/EVENTS/DELETE condition: selection_operation_name level: medium tags: