From 6730a5bb6db799e5da8146e46fb3881dbed6875b Mon Sep 17 00:00:00 2001
From: tccontre <26181693+tccontre@users.noreply.github.com>
Date: Thu, 28 Apr 2022 15:09:26 +0200
Subject: [PATCH] Update windows_root_domain_linked_policies_discovery.test.yml

---
 .../windows_root_domain_linked_policies_discovery.test.yml    | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/endpoint/windows_root_domain_linked_policies_discovery.test.yml b/tests/endpoint/windows_root_domain_linked_policies_discovery.test.yml
index 8c27e137ad..a358883074 100644
--- a/tests/endpoint/windows_root_domain_linked_policies_discovery.test.yml
+++ b/tests/endpoint/windows_root_domain_linked_policies_discovery.test.yml
@@ -6,7 +6,7 @@ tests:
   earliest_time: -24h
   latest_time: now
   attack_data:
-  - file_name: windows-powershell-xml1.log
-    data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1087.002/adsi_discovery/windows-powershell-xml1.log
+  - file_name: windows-powershell-xml.log
+    data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1087.002/adsi_discovery/windows-powershell-xml.log
     source: XmlWinEventLog:Microsoft-Windows-PowerShell/Operational
     sourcetype: xmlwineventlog