From 3fcdb20c519e4600629bed22f91b6caaedc3a16a Mon Sep 17 00:00:00 2001 From: mvelazco Date: Fri, 10 Sep 2021 12:34:18 -0400 Subject: [PATCH] fixing minor issue with dataset URL --- tests/endpoint/elevated_group_discovery_with_wmic.test.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/endpoint/elevated_group_discovery_with_wmic.test.yml b/tests/endpoint/elevated_group_discovery_with_wmic.test.yml index 91c6617160..77b45b227d 100644 --- a/tests/endpoint/elevated_group_discovery_with_wmic.test.yml +++ b/tests/endpoint/elevated_group_discovery_with_wmic.test.yml @@ -7,6 +7,6 @@ tests: latest_time: 'now' attack_data: - file_name: windows-sysmon.log - data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1060.002/AD_discovery/windows-sysmon.log + data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1069.002/AD_discovery/windows-sysmon.log source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational sourcetype: xmlwineventlog \ No newline at end of file