Update win_hybridconnectionmgr_svc_running.yml

SigmaHQ · Aug 10, 2024 · 0811cc0 · 0811cc0
1 parent 3b5dc03
commit 0811cc0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rules/windows/builtin/servicebus/win_hybridconnectionmgr_svc_running.yml b/rules/windows/builtin/servicebus/win_hybridconnectionmgr_svc_running.yml
@@ -12,7 +12,7 @@ tags:
     - attack.t1554
 logsource:
     product: windows
-    service: servicebus-client
+    service: microsoft-servicebus-client # Change to servicebus-client once validators are up to date
 detection:
     selection:
         EventID: