From 24779bc8ef60602dca8086ecb0777e4490344a8c Mon Sep 17 00:00:00 2001
From: mhaag-spl <5632822+MHaggis@users.noreply.github.com>
Date: Tue, 9 Nov 2021 13:47:05 -0700
Subject: [PATCH] Update
 winevent_windows_task_scheduler_event_action_started.test.yml

---
 ...inevent_windows_task_scheduler_event_action_started.test.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/endpoint/winevent_windows_task_scheduler_event_action_started.test.yml b/tests/endpoint/winevent_windows_task_scheduler_event_action_started.test.yml
index aa454723f5..5fc9cfcd9e 100644
--- a/tests/endpoint/winevent_windows_task_scheduler_event_action_started.test.yml
+++ b/tests/endpoint/winevent_windows_task_scheduler_event_action_started.test.yml
@@ -3,7 +3,7 @@ tests:
 - name: WinEvent Windows Task Scheduler Event Action Started
   file: endpoint/winevent_windows_task_scheduler_event_action_started.yml
   pass_condition: '| stats count | where count > 0'
-  earliest_time: '-10d'
+  earliest_time: '-45d'
   latest_time: 'now'
   attack_data:
   - file_name: windows-taskschedule.log