From e5796ce83c2673f897b06253dfd0e906eed5b185 Mon Sep 17 00:00:00 2001
From: Bievens <46230318+Bievens@users.noreply.github.com>
Date: Fri, 11 Oct 2024 18:11:44 -0600
Subject: [PATCH] Update EmailEntity_CloudAppEvents.yaml

Under entityType: Account for identifier: FullName the  columnName: User_id was changed to match case of the extend operator on line 35 "User_Id" to "User_id"
---
 .../Analytic Rules/EmailEntity_CloudAppEvents.yaml          | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/Solutions/Threat Intelligence/Analytic Rules/EmailEntity_CloudAppEvents.yaml b/Solutions/Threat Intelligence/Analytic Rules/EmailEntity_CloudAppEvents.yaml
index ad209b99b8..46ddb6a39c 100644
--- a/Solutions/Threat Intelligence/Analytic Rules/EmailEntity_CloudAppEvents.yaml	
+++ b/Solutions/Threat Intelligence/Analytic Rules/EmailEntity_CloudAppEvents.yaml	
@@ -44,8 +44,8 @@ entityMappings:
       - identifier: DisplayName
         columnName: Name
       - identifier: FullName
-        columnName: User_Id
+        columnName: User_id
       - identifier: UPNSuffix
         columnName: UPNSuffix
-version: 1.0.2
-kind: Scheduled
\ No newline at end of file
+version: 1.0.3
+kind: Scheduled