From 0f75a16ea3b9daaaeeaed1e953bff7faee1bafb3 Mon Sep 17 00:00:00 2001
From: Gott <47673777+danielgottt@users.noreply.github.com>
Date: Mon, 29 Aug 2022 11:46:25 -0400
Subject: [PATCH] Update proc_creation_win_deviceenroller_evasion.yml

correction to mitre tag
---
 .../proc_creation_win_deviceenroller_evasion.yml                | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rules/windows/process_creation/proc_creation_win_deviceenroller_evasion.yml b/rules/windows/process_creation/proc_creation_win_deviceenroller_evasion.yml
index dbe06719f..1ae85673f 100644
--- a/rules/windows/process_creation/proc_creation_win_deviceenroller_evasion.yml
+++ b/rules/windows/process_creation/proc_creation_win_deviceenroller_evasion.yml
@@ -8,7 +8,7 @@ status: experimental
 author: '@gott_cyber'
 date: 2022/08/29
 tags:
-  - attack.defense.evasion
+  - attack.defense_evasion
   - attack.t1574.002
 logsource:
   category: process_creation