From 52c4efdd1cf914b3c058c706af1ad96bebe90988 Mon Sep 17 00:00:00 2001
From: Vishal Nakra <vnakra@c02rv2mug8wm.fios-router.home>
Date: Thu, 16 Apr 2020 10:39:48 -0400
Subject: [PATCH] Updated ATT&CK Technique mapping to T1490

---
 detections/delete_shadow_copies.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/detections/delete_shadow_copies.yml b/detections/delete_shadow_copies.yml
index 49ba6e8edf..7b286d1e33 100644
--- a/detections/delete_shadow_copies.yml
+++ b/detections/delete_shadow_copies.yml
@@ -95,7 +95,9 @@ mappings:
   kill_chain_phases:
     - Actions on Objectives
   mitre_attack:
-    - Execution
+    - Impact
+  mitre_technique_id:
+    - T1490
   nist:
     - PR.PT
     - DE.CM