From 4d1bd7663b151f5d07a2aa01149d1443e4b9cd2f Mon Sep 17 00:00:00 2001
From: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>
Date: Wed, 8 Feb 2023 19:16:53 +0100
Subject: [PATCH] fix: update duplicate title

---
 .../image_load/image_load_office_outlook_outlvba.yml        | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/rules/windows/image_load/image_load_office_outlook_outlvba.yml b/rules/windows/image_load/image_load_office_outlook_outlvba.yml
index b05efb86c..0b7865d02 100644
--- a/rules/windows/image_load/image_load_office_outlook_outlvba.yml
+++ b/rules/windows/image_load/image_load_office_outlook_outlvba.yml
@@ -1,7 +1,7 @@
-title: Macro Enabled DLL Loaded Via Office Applications
-id: ff0f2b05-09db-4095-b96d-1b75ca24894a
+title: Microsoft VBA For Outlook Addin Loaded Via Outlook
+id: 9a0b8719-cd3c-4f0a-90de-765a4cb3f5ed
 status: test
-description: Detects any assembly DLL being loaded by an Office Product
+description: Detects outlvba (Microsoft VBA for Outlook Addin) DLL being loaded by the outlook process
 references:
     - https://speakerdeck.com/heirhabarov/hunting-for-persistence-via-microsoft-exchange-server-or-outlook?slide=58
 author: Nasreddine Bencherchali (Nextron Systems)