From 10d95baa2b7ff69a599b041ab4a3e852d7aa09be Mon Sep 17 00:00:00 2001
From: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>
Date: Tue, 1 Jul 2025 08:18:18 -0400
Subject: [PATCH] [Rule Tuning] Microsoft Entra ID Exccessive Account Lockouts
 Detected (#4851)

* adjusting Microsoft Entra ID Exccessive Account Lockouts Detected

* removing unit test

* added newline

* adjusted dates
---
 ...credential_access_entra_id_excessive_account_lockouts.toml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/rules/integrations/azure/credential_access_entra_id_excessive_account_lockouts.toml b/rules/integrations/azure/credential_access_entra_id_excessive_account_lockouts.toml
index c79731b94..70676b277 100644
--- a/rules/integrations/azure/credential_access_entra_id_excessive_account_lockouts.toml
+++ b/rules/integrations/azure/credential_access_entra_id_excessive_account_lockouts.toml
@@ -1,10 +1,10 @@
 [metadata]
-creation_date = "2026/06/06"
+creation_date = "2025/07/01"
 integration = ["azure"]
 maturity = "production"
 min_stack_comments = "Elastic ES|QL values aggregation is more performant in 8.16.5 and above."
 min_stack_version = "8.17.0"
-updated_date = "2026/06/06"
+updated_date = "2025/07/01"
 
 [rule]
 author = ["Elastic"]