From 2331649bd10f70f4ed553206e632e6fba63c077a Mon Sep 17 00:00:00 2001 From: v-rbajaj Date: Tue, 17 Oct 2023 15:48:45 +0530 Subject: [PATCH] Update PIMElevationRequestRejected.yaml --- .../Analytic Rules/PIMElevationRequestRejected.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Solutions/Azure Active Directory/Analytic Rules/PIMElevationRequestRejected.yaml b/Solutions/Azure Active Directory/Analytic Rules/PIMElevationRequestRejected.yaml index a3f611e59d0..81123db02a5 100644 --- a/Solutions/Azure Active Directory/Analytic Rules/PIMElevationRequestRejected.yaml +++ b/Solutions/Azure Active Directory/Analytic Rules/PIMElevationRequestRejected.yaml @@ -21,7 +21,7 @@ tags: - AADSecOpsGuide query: | AuditLogs - | ActivityDisplayName =~'Add member to role request denied (PIM activation)' + | where ActivityDisplayName =~'Add member to role request denied (PIM activation)' | mv-apply ResourceItem = TargetResources on ( where ResourceItem.type =~ "Role"