Update New TABL Items.yaml
Fixed issue with indentation on line 15
This commit is contained in:
Родитель
cf5ab0266f
Коммит
28e68c57dd
|
@ -12,7 +12,7 @@ relevantTechniques:
|
|||
- T1484
|
||||
query: |
|
||||
CloudAppEvents
|
||||
| where ActionType == "New-TenantAllowBlockListItems"
|
||||
| where ActionType == "New-TenantAllowBlockListItems"
|
||||
| extend Parameters = RawEventData.Parameters
|
||||
| mv-apply Parameters on (
|
||||
extend Out=bag_pack(tostring(Parameters.Name), Parameters.Value)
|
||||
|
|
Загрузка…
Ссылка в новой задаче