From 12e5eeac9ecb3e5d4e2243e9b2c829ca331c609f Mon Sep 17 00:00:00 2001 From: Austin Songer Date: Sun, 12 Sep 2021 19:30:03 -0500 Subject: [PATCH] Update okta_policy_modified_or_deleted.yml --- rules/cloud/okta/okta_policy_modified_or_deleted.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/cloud/okta/okta_policy_modified_or_deleted.yml b/rules/cloud/okta/okta_policy_modified_or_deleted.yml index 494af5b50..2e72accd1 100644 --- a/rules/cloud/okta/okta_policy_modified_or_deleted.yml +++ b/rules/cloud/okta/okta_policy_modified_or_deleted.yml @@ -11,7 +11,7 @@ logsource: service: okta detection: selection: - displaymessge: + eventtype: - policy.lifecycle.update - policy.lifecycle.delete condition: selection