add Scheduled kind to all exisitng templates (solutions + detections)

Detections/ASimAuthentication/imAuthBruteForce.yaml

@@ -43,4 +43,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.1.0
-kind: scheduled
+kind: Scheduled

Detections/ASimAuthentication/imAuthPasswordSpray.yaml

@@ -37,4 +37,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.1.0
-kind: scheduled
+kind: Scheduled

Detections/ASimAuthentication/imAuthSigninsMultipleCountries.yaml

@@ -38,4 +38,4 @@ entityMappings:
       - identifier: FullName
         columnName: AccountCustomEntity
 version: 1.1.0
-kind: scheduled
+kind: Scheduled

Detections/ASimAuthentication/imSigninAttemptsByIPviaDisabledAccounts.yaml

@@ -50,4 +50,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/ASimDNS/imDNS_Miners.yaml

@@ -40,4 +40,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.2.0
-kind: scheduled
+kind: Scheduled

Detections/ASimDNS/imDNS_TorProxies.yaml

@@ -35,4 +35,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.2.0
-kind: scheduled
+kind: Scheduled

Detections/ASimDNS/imDns_DomainEntity_DnsEvents.yaml

@@ -66,4 +66,4 @@ customDetails:
   DnsQuery: DnsQuery
   QueryType: QueryType
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/ASimDNS/imDns_ExcessiveNXDOMAINDNSQueries.yaml

@@ -35,4 +35,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.2.0
-kind: scheduled
+kind: Scheduled

Detections/ASimDNS/imDns_HighNXDomainCount_detection.yaml

@@ -49,4 +49,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/ASimDNS/imDns_IPEntity_DnsEvents.yaml

@@ -75,4 +75,4 @@ customDetails:
   SubType: SubType 
   DnsQuery: DnsQuery
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/ASimFileEvent/imFileESolarWindsSunburstSupernova.yaml

@@ -46,4 +46,4 @@ entityMappings:
       - identifier: Value
         columnName: FileHashCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/ASimProcess/imProcess_AdFind_Usage.yaml

@@ -53,4 +53,4 @@ entityMappings:
       - identifier: Value
         columnName: FileHashCustomEntity
 version: 1.1.0
-kind: scheduled
+kind: Scheduled

Detections/ASimProcess/imProcess_NOBELIUM_SuspiciousRundll32Exec.yaml

@@ -37,4 +37,4 @@ entityMappings:
       - identifier: FullName
         columnName: HostCustomEntity
 version: 1.1.0
-kind: scheduled
+kind: Scheduled

Detections/ASimProcess/imProcess_SolarWinds_SUNBURST_Process-IOCs.yaml

@@ -51,4 +51,4 @@ entityMappings:
       - identifier: Value
         columnName: FileHashCustomEntity
 version: 1.1.0
-kind: scheduled
+kind: Scheduled

Detections/ASimProcess/imProcess_base64_encoded_pefile.yaml

@@ -39,4 +39,4 @@ entityMappings:
       - identifier: FullName
         columnName: HostCustomEntity
 version: 1.1.0
-kind: scheduled
+kind: Scheduled

Detections/ASimProcess/imProcess_malware_in_recyclebin.yaml

@@ -39,4 +39,4 @@ entityMappings:
       - identifier: FullName
         columnName: HostCustomEntity
 version: 1.1.0
-kind: scheduled
+kind: Scheduled

Detections/AWSCloudTrail/AWS_ChangeToRDSDatabase.yaml

@@ -36,4 +36,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AWSCloudTrail/AWS_ChangeToVPC.yaml

@@ -38,4 +38,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AWSCloudTrail/AWS_ClearStopChangeTrailLogs.yaml

@@ -37,4 +37,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AWSCloudTrail/AWS_ConsoleLogonWithoutMFA.yaml

@@ -40,4 +40,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AWSCloudTrail/AWS_CredentialHijack.yaml

@@ -37,4 +37,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AWSCloudTrail/AWS_FullAdminPolicyAttachedToRolesUsersGroups.yaml

@@ -70,4 +70,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AWSCloudTrail/AWS_IngressEgressSecurityGroupChange.yaml

@@ -37,4 +37,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AWSCloudTrail/AWS_LoadBalancerSecGroupChange.yaml

@@ -38,4 +38,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AlsidForAD/ADAttacksPathways.yaml

@@ -28,4 +28,4 @@ query: |
   | lookup kind=leftouter SeverityTable on Severity
   | order by Level
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AlsidForAD/DCShadow.yaml

@@ -19,4 +19,4 @@ query: |
     afad_parser
     | where MessageType == 2 and Codename == "DCShadow"
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AlsidForAD/DCSync.yaml

@@ -19,4 +19,4 @@ query: |
     afad_parser
     | where MessageType == 2 and Codename == "DCSync"
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AlsidForAD/GoldenTicket.yaml

@@ -19,4 +19,4 @@ query: |
     afad_parser
     | where MessageType == 2 and Codename == "Golden Ticket"
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AlsidForAD/IndicatorsOfAttack.yaml

@@ -27,4 +27,4 @@ query: |
     | lookup kind=leftouter SeverityTable on Severity
     | order by Level
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AlsidForAD/IndicatorsOfExposures.yaml

@@ -27,4 +27,4 @@ query: |
     | lookup kind=leftouter SeverityTable on Severity
     | order by Level
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AlsidForAD/LSASSMemory.yaml

@@ -19,4 +19,4 @@ query: |
     afad_parser
     | where MessageType == 2 and Codename == "OS Credential Dumping: LSASS Memory"
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AlsidForAD/PasswordGuessing.yaml

@@ -19,4 +19,4 @@ query: |
     afad_parser
     | where MessageType == 2 and Codename == "Password Guessing"
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AlsidForAD/PasswordIssues.yaml

@@ -28,4 +28,4 @@ query: |
   | lookup kind=leftouter SeverityTable on Severity
   | order by Level
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AlsidForAD/PasswordSpraying.yaml

@@ -19,4 +19,4 @@ query: |
     afad_parser
     | where MessageType == 2 and Codename == "Password Spraying"
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AlsidForAD/PrivilegedAccountIssues.yaml

@@ -28,4 +28,4 @@ query: |
   | lookup kind=leftouter SeverityTable on Severity
   | order by Level
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AlsidForAD/UserAccountIssues.yaml

@@ -28,4 +28,4 @@ query: |
   | lookup kind=leftouter SeverityTable on Severity
   | order by Level
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AuditLogs/ADFSDomainTrustMods.yaml

@@ -58,4 +58,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AuditLogs/CredentialAddedAfterAdminConsent.yaml

@@ -67,4 +67,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AuditLogs/FirstAppOrServicePrincipalCredential.yaml

@@ -56,4 +56,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AuditLogs/MailPermissionsAddedToApplication.yaml

@@ -55,4 +55,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AuditLogs/MaliciousOAuthApp_O365AttackToolkit.yaml

@@ -71,4 +71,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AuditLogs/MaliciousOAuthApp_PwnAuth.yaml

@@ -71,4 +71,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AuditLogs/NewAppOrServicePrincipalCredential.yaml

@@ -58,4 +58,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AuditLogs/RareApplicationConsent.yaml

@@ -78,4 +78,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.1.0
-kind: scheduled
+kind: Scheduled

Detections/AuditLogs/SuspiciousOAuthApp_OfflineAccess.yaml

@@ -69,4 +69,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AuditLogs/UseraddedtoPrivilgedGroups.yaml

@@ -58,4 +58,4 @@ entityMappings:
       - identifier: FullName
         columnName: TargetUserPrincipalName
 version: 1.0.1
-kind: scheduled
+kind: Scheduled

Detections/AzureActivity/AADHybridHealthADFSNewServer.yaml

@@ -40,4 +40,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureActivity/AADHybridHealthADFSServiceDelete.yaml

@@ -41,4 +41,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureActivity/AADHybridHealthADFSSuspApp.yaml

@@ -46,4 +46,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureActivity/Creating_Anomalous_Number_Of_Resources_detection.yaml

@@ -61,4 +61,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.1.0
-kind: scheduled
+kind: Scheduled

Detections/AzureActivity/Creation_of_Expensive_Computes_in_Azure.yaml

@@ -43,4 +43,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.1.0
-kind: scheduled
+kind: Scheduled

Detections/AzureActivity/Granting_Permissions_To_Account_detection.yaml

@@ -46,4 +46,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.1.0
-kind: scheduled
+kind: Scheduled

Detections/AzureActivity/New-CloudShell-User.yaml

@@ -42,4 +42,4 @@ entityMappings:
       - identifier: Address
         columnName: UserIP
 version: 1.1.0
-kind: scheduled
+kind: Scheduled

Detections/AzureActivity/NewResourceGroupsDeployedTo.yaml

@@ -47,4 +47,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureActivity/RareOperations.yaml

@@ -51,4 +51,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.1.0
-kind: scheduled
+kind: Scheduled

Detections/AzureAppServices/AVScan_Failure.yaml

@@ -20,4 +20,4 @@ entityMappings:
       - identifier: FullName
         columnName: HostCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureAppServices/AVScan_Infected_Files_Found.yaml

@@ -20,4 +20,4 @@ entityMappings:
       - identifier: FullName
         columnName: HostCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureDevOpsAuditing/ADOAgentPoolCreatedDeleted.yaml

@@ -46,4 +46,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureDevOpsAuditing/ADOAuditStreamDisabled.yaml

@@ -28,4 +28,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureDevOpsAuditing/ADONewExtensionAdded.yaml

@@ -31,4 +31,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureDevOpsAuditing/ADOPATUsedWithBrowser.yaml

@@ -28,4 +28,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureDevOpsAuditing/ADOPipelineModifiedbyNewUser.yaml

@@ -55,4 +55,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureDevOpsAuditing/ADORetentionReducedto0.yaml

@@ -29,4 +29,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureDevOpsAuditing/ADOSecretNotSecured.yaml

@@ -34,4 +34,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureDevOpsAuditing/ADOVariableModifiedByNewUser.yaml

@@ -43,4 +43,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureDevOpsAuditing/AzDOAdminGroupAdditions.yaml

@@ -39,4 +39,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureDevOpsAuditing/AzDOHistoricPrPolicyBypassing.yaml

@@ -40,4 +40,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureDevOpsAuditing/AzDOHistoricServiceConnectionAdds.yaml

@@ -59,4 +59,4 @@ entityMappings:
       - identifier: FullName
         columnName: AccountCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureDevOpsAuditing/AzDOPatSessionMisuse.yaml

@@ -42,4 +42,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureDevOpsAuditing/AzDOPipelineCreatedDeletedOneDay.yaml

@@ -57,4 +57,4 @@ entityMappings:
       - identifier: Address
         columnName: DeletingIP
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureDevOpsAuditing/AzDOServiceConnectionUsage.yaml

@@ -39,4 +39,4 @@ query: |
     strcat('https://dev.azure.com/', OrganizationName, '/', ProjectName, '/_release?_a=releases&view=mine&definitionId=', DefId))
   | extend timestamp = StartTime
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureDevOpsAuditing/ExternalUpstreamSourceAddedtoAzureDevOpsFeed.yaml

@@ -45,4 +45,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureDevOpsAuditing/NewAgentAddedToPoolbyNewUserorofNewOS.yaml

@@ -62,4 +62,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureDevOpsAuditing/NewPAPCAPCASaddedtoADO.yaml

@@ -40,4 +40,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureDiagnostics/KeyVaultSensitiveOperations.yaml

@@ -41,4 +41,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureDiagnostics/KeyvaultMassSecretRetrieval.yaml

@@ -58,4 +58,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.1
-kind: scheduled
+kind: Scheduled

Detections/AzureDiagnostics/MaliciousWAFSessions.yaml

@@ -57,4 +57,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/AzureDiagnostics/TimeSeriesKeyvaultAccessAnomaly.yaml

@@ -79,4 +79,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.1
-kind: scheduled
+kind: Scheduled

Detections/AzureFirewall/SeveralDenyActionsRegistered.yaml

@@ -44,4 +44,4 @@ entityMappings:
       - identifier: Url
         columnName: URLCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/CiscoUmbrella/CiscoUmbrellaConnectionNon-CorporatePrivateNetwork.yaml

@@ -34,4 +34,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/CiscoUmbrella/CiscoUmbrellaConnectionToUnpopularWebsiteDetected.yaml

@@ -41,4 +41,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/CiscoUmbrella/CiscoUmbrellaCryptoMinerUserAgentDetected.yaml

@@ -32,4 +32,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/CiscoUmbrella/CiscoUmbrellaEmptyUserAgentDetected.yaml

@@ -32,4 +32,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/CiscoUmbrella/CiscoUmbrellaHackToolUserAgentDetected.yaml

@@ -80,4 +80,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/CiscoUmbrella/CiscoUmbrellaPowershellUserAgentDetected.yaml

@@ -33,4 +33,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/CiscoUmbrella/CiscoUmbrellaRareUserAgentDetected.yaml

@@ -38,4 +38,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/CiscoUmbrella/CiscoUmbrellaRequestAllowedHarmfulMaliciousURICategory.yaml

@@ -51,4 +51,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/CiscoUmbrella/CiscoUmbrellaRequestBlocklistedFileType.yaml

@@ -36,4 +36,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/CiscoUmbrella/CiscoUmbrellaURIContainsIPAddress.yaml

@@ -33,4 +33,4 @@ entityMappings:
       - identifier: Address
         columnName: IPCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/Cognni/CognniHighRiskBusinessIncidents.yaml

@@ -29,4 +29,4 @@ entityMappings:
       - identifier: FullName
         columnName: AccountCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/Cognni/CognniHighRiskFinancialIncidents.yaml

@@ -29,4 +29,4 @@ entityMappings:
       - identifier: FullName
         columnName: AccountCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/Cognni/CognniHighRiskGovernanceIncidents.yaml

@@ -29,4 +29,4 @@ entityMappings:
       - identifier: FullName
         columnName: AccountCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/Cognni/CognniHighRiskHRIncidents.yaml

@@ -29,4 +29,4 @@ entityMappings:
       - identifier: FullName
         columnName: AccountCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/Cognni/CognniHighRiskLegalIncidents.yaml

@@ -29,4 +29,4 @@ entityMappings:
       - identifier: FullName
         columnName: AccountCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/Cognni/CognniLowRiskBusinessIncidents.yaml

@@ -29,4 +29,4 @@ entityMappings:
       - identifier: FullName
         columnName: AccountCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/Cognni/CognniLowRiskFinancialIncidents.yaml

@@ -29,4 +29,4 @@ entityMappings:
       - identifier: FullName
         columnName: AccountCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/Cognni/CognniLowRiskGovernanceIncidents.yaml

@@ -29,4 +29,4 @@ entityMappings:
       - identifier: FullName
         columnName: AccountCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/Cognni/CognniLowRiskHRIncidents.yaml

@@ -29,4 +29,4 @@ entityMappings:
       - identifier: FullName
         columnName: AccountCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/Cognni/CognniLowRiskLegalIncidents.yaml

@@ -29,4 +29,4 @@ entityMappings:
       - identifier: FullName
         columnName: AccountCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled

Detections/Cognni/CognniMediumRiskBusinessIncidents.yaml

@@ -29,4 +29,4 @@ entityMappings:
       - identifier: FullName
         columnName: AccountCustomEntity
 version: 1.0.0
-kind: scheduled
+kind: Scheduled