name: Credential Extraction native Microsoft debuggers peek into the kernel - SSA Unit test
tests:
  - name: Credential Extraction native Microsoft debuggers peek into the kernel
    file: endpoint/ssa___credential_extraction_ms_debuggers_kernel_peek.yml
    pass_condition: '@count_gt(0)'
    description: Test credential extraction detections
    attack_data:
      - file_name: logLiveKDFullKernelDump.log
        data: https://ssa-test-dataset.s3-us-west-2.amazonaws.com/logLiveKDFullKernelDump.log

