corrected connnector for Keyvault

Detections/AzureDiagnostics/KeyVaultSensitiveOperations.yaml

@@ -5,7 +5,7 @@ description: |
   Any Backup operations should match with expected scheduled backup activity.'
 severity: Low
 requiredDataConnectors:
-  - connectorId: WAF
+  - connectorId: AzureMonitor(Keyvault)
     dataTypes:
       - AzureDiagnostics
 queryFrequency: 1d

Detections/AzureDiagnostics/KeyvaultMassSecretRetrieval.yaml

@@ -7,7 +7,7 @@ description: |
   and also filter any known sources (IP/Account) and useragent combinations based on historical analysis to further reduce noise'
 severity: Low
 requiredDataConnectors:
-  - connectorId: WAF
+  - connectorId: AzureMonitor(Keyvault)
     dataTypes:
       - AzureDiagnostics
 queryFrequency: 1d

Detections/AzureDiagnostics/TimeSeriesKeyvaultAccessAnomaly.yaml

@@ -7,7 +7,7 @@ description: |
   TimeSeries Reference Blog: https://techcommunity.microsoft.com/t5/azure-sentinel/looking-for-unknown-anomalies-what-is-normal-time-series/ba-p/555052'
 severity: Low
 requiredDataConnectors:
-  - connectorId: WAF
+  - connectorId: AzureMonitor(Keyvault)
     dataTypes:
       - AzureDiagnostics
 queryFrequency: 1h