Update PIMElevationRequestRejected.yaml

Azure · Oct 17, 2023 · 2331649 · 2331649
1 parent b9a157b
commit 2331649
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Solutions/Azure Active Directory/Analytic Rules/PIMElevationRequestRejected.yaml b/Solutions/Azure Active Directory/Analytic Rules/PIMElevationRequestRejected.yaml
@@ -21,7 +21,7 @@ tags:
   - AADSecOpsGuide
 query: |
   AuditLogs
-  | ActivityDisplayName =~'Add member to role request denied (PIM activation)'
+  | where ActivityDisplayName =~'Add member to role request denied (PIM activation)'
   | mv-apply ResourceItem = TargetResources on 
     (
         where ResourceItem.type =~ "Role"