From 054fa8ca3ba87579f076499a040fb3fe3db5f047 Mon Sep 17 00:00:00 2001
From: root <root@ip-10-0-239-40>
Date: Thu, 5 Nov 2020 08:46:55 +0000
Subject: [PATCH] Added detection testing service results inAccess LSASS Memory
 for Dump Creation

---
 detections/endpoint/access_lsass_memory_for_dump_creation.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/detections/endpoint/access_lsass_memory_for_dump_creation.yml b/detections/endpoint/access_lsass_memory_for_dump_creation.yml
index d1753d4c50..0a71e173e1 100644
--- a/detections/endpoint/access_lsass_memory_for_dump_creation.yml
+++ b/detections/endpoint/access_lsass_memory_for_dump_creation.yml
@@ -33,3 +33,6 @@ tags:
   - DE.CM
   security_domain: endpoint
   asset_type: Windows
+  automated_detection_testing: passed
+  dataset:
+  - https://attack-range-attack-data.s3-us-west-2.amazonaws.com/T1003.001/windows-sysmon.log