Update Sign-in Burst from Multiple Locations.yaml
DetectionTemplate validation is failing with - YamlDotNet.Core.SemanticErrorException : (Line: 20, Col: 1, Idx: 451) - (Line: 20, Col: 3, Idx: 453): While scanning a literal block scalar, found extra spaces in first line. Removing empty line from after query: | to see if it is that.
This commit is contained in:
Родитель
a05f842898
Коммит
bf4d353dcf
|
@ -16,7 +16,6 @@ tactics:
|
|||
relevantTechniques:
|
||||
- T1110
|
||||
query: |
|
||||
|
||||
let RunTime = 1h;
|
||||
SigninLogs
|
||||
| where TimeGenerated > ago(RunTime)
|
||||
|
|
Загрузка…
Ссылка в новой задаче