From 3749a4f2d86d3271a6e2a0f3ae9c5cf9c44e16be Mon Sep 17 00:00:00 2001
From: Brandon Murphy <4827852+zoomequipd@users.noreply.github.com>
Date: Wed, 13 Nov 2024 16:04:20 -0600
Subject: [PATCH] Update
 link_credential_phishing_intent_and_other_indicators.yml (#2089)

---
 .../link_credential_phishing_intent_and_other_indicators.yml    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/detection-rules/link_credential_phishing_intent_and_other_indicators.yml b/detection-rules/link_credential_phishing_intent_and_other_indicators.yml
index 631f69f8bd2..029c155f58a 100644
--- a/detection-rules/link_credential_phishing_intent_and_other_indicators.yml
+++ b/detection-rules/link_credential_phishing_intent_and_other_indicators.yml
@@ -232,7 +232,7 @@ source: |
                        "Fax",
                        "Free",
                        "Gift",
-                       "HR",
+                       '\bHR\b',
                        "Helpdesk",
                        "Human Resources",
                        "Immediate",