From cbf06b1e43dc523885c3107fb35ffcc88c20e735 Mon Sep 17 00:00:00 2001
From: gamma37 <marie.euler@polytechnique.edu>
Date: Mon, 18 May 2020 10:11:32 +0200
Subject: [PATCH] lowercased tag

---
 rules/linux/auditd/lnx_auditd_create_account.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rules/linux/auditd/lnx_auditd_create_account.yml b/rules/linux/auditd/lnx_auditd_create_account.yml
index c9a18eac8..14be30c03 100644
--- a/rules/linux/auditd/lnx_auditd_create_account.yml
+++ b/rules/linux/auditd/lnx_auditd_create_account.yml
@@ -6,7 +6,7 @@ references:
     - 'MITRE Attack technique T1136; Create Account '
 date: 2020/05/18
 tags:
-    - attack.T1136
+    - attack.t1136
     - attack.persistence
 author: Marie Euler
 logsource: