name: Illegal Privilege Elevation via Mimikatz modules - SSA Unit test
tests:
  - name: Illegal Privilege Elevation via Mimikatz modules
    file: endpoint/ssa___illegal_privilege_elevation_via_mimikatz_modules.yml
    pass_condition: '@count_gt(0)'
    description: Test illegal privilege elevation detections
    attack_data:
      - file_name: logAllMimikatzModules.log
        data: https://ssa-test-dataset.s3-us-west-2.amazonaws.com/logAllMimikatzModules.log

