diff --git a/tests/endpoint/powershell_reflective_load.test.yml b/tests/endpoint/powershell_reflective_load.test.yml deleted file mode 100644 index 167a524ebc..0000000000 --- a/tests/endpoint/powershell_reflective_load.test.yml +++ /dev/null @@ -1,12 +0,0 @@ -name: Powershell Reflective Load Unit Test -tests: -- name: Powershell Reflective Load - file: endpoint/powershell_reflective_load.yml - pass_condition: '| stats count | where count > 0' - earliest_time: '-24h' - latest_time: 'now' - attack_data: - - file_name: powershell.log - data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1127.001/regsvr32_silent/powershell.log - source: WinEventLog:Microsoft-Windows-PowerShell/Operational - sourcetype: WinEventLog \ No newline at end of file