From 7c3dea22b8702d7cc8e6796fd383d5a62096fffa Mon Sep 17 00:00:00 2001
From: neu5ron <>
Date: Tue, 19 May 2020 05:13:48 -0400
Subject: [PATCH] small T, big T

---
 .../network/zeek/zeek_http_executable_download_from_webdav.yml  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rules/network/zeek/zeek_http_executable_download_from_webdav.yml b/rules/network/zeek/zeek_http_executable_download_from_webdav.yml
index 5890bc8a8..47cfdcbf2 100644
--- a/rules/network/zeek/zeek_http_executable_download_from_webdav.yml
+++ b/rules/network/zeek/zeek_http_executable_download_from_webdav.yml
@@ -7,7 +7,7 @@ references:
     - https://github.com/OTRF/detection-hackathon-apt29
 tags:
     - attack.command_and_control
-    - attack.T1043
+    - attack.t1043
 logsource:
   product: zeek
   service: http