diff --git a/Solutions/Microsoft 365 Defender/Analytic Rules/PossibleWebpBufferOverflow.yaml b/Solutions/Microsoft 365 Defender/Analytic Rules/PossibleWebpBufferOverflow.yaml index 37103a77832..c50561d78f5 100644 --- a/Solutions/Microsoft 365 Defender/Analytic Rules/PossibleWebpBufferOverflow.yaml +++ b/Solutions/Microsoft 365 Defender/Analytic Rules/PossibleWebpBufferOverflow.yaml @@ -41,10 +41,6 @@ entityMappings: fieldMappings: - identifier: ProcessId columnName: InitiatingProcessId -- entityType: Process - fieldMappings: - - identifier: CommandLine - columnName: InitiatingProcessCommandLine - entityType: Process fieldMappings: - identifier: CommandLine