From 28bd33c4f9bee9b33a969c8eeebbe35677cad3cd Mon Sep 17 00:00:00 2001 From: root Date: Mon, 7 Dec 2020 12:34:31 +0000 Subject: [PATCH] Added detection testing service results inSamsam Test File Write --- detections/endpoint/samsam_test_file_write.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/detections/endpoint/samsam_test_file_write.yml b/detections/endpoint/samsam_test_file_write.yml index 8f2f2eaf88..3908a5cae9 100644 --- a/detections/endpoint/samsam_test_file_write.yml +++ b/detections/endpoint/samsam_test_file_write.yml @@ -31,3 +31,6 @@ tags: - DE.CM security_domain: endpoint asset_type: Endpoint + automated_detection_testing: passed + dataset: + - https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1486/sam_sam_note/windows-sysmon.log