3b980d31-7904-4bb7-8575-5665739a8052 - Category 'security' should be 'administrative' ?

[bpas1990]

When checking out this policy: 3b980d31-7904-4bb7-8575-5665739a8052

It checks:

field: "Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field",
equals: "category"

field: "Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals",
equals: "Security"

When creating the required activitylog alert all three allowed values for the parameters:
"Microsoft.Security/policies/write",
"Microsoft.Security/securitySolutions/write",
"Microsoft.Security/securitySolutions/delete"

dont seem to be part of the 'security' category but the 'administrative' category?

checking the condition preview:
Condition preview
Whenever the Activity Log has an event with Category='Administrative', Signal name='Delete Security Solutions (Security Solutions)'

For all three allowed values category becomes 'Administrative' resulting non-compliancy.