From 025a17e44b03b26ba6aca0e31c6c92d00c33fc3e Mon Sep 17 00:00:00 2001
From: Joshua Roys <joshua.roys@kudelskisecurity.com>
Date: Mon, 22 Feb 2021 21:34:06 -0500
Subject: [PATCH] fix: case in level

Otherwise es-rule ends up with a null risk_score and invalid severity.
---
 rules/cloud/aws_update_login_profile.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rules/cloud/aws_update_login_profile.yml b/rules/cloud/aws_update_login_profile.yml
index ae796a53..f9654450 100644
--- a/rules/cloud/aws_update_login_profile.yml
+++ b/rules/cloud/aws_update_login_profile.yml
@@ -23,7 +23,7 @@ fields:
     - errorMessage
 falsepositives:
     - Legit User Account Administration 
-level: High
+level: high
 tags:
     - attack.persistence
     - attack.t1098