From 69d72deb158c03bf2d0084e66e4dc96453bec317 Mon Sep 17 00:00:00 2001
From: mhaag-spl <5632822+MHaggis@users.noreply.github.com>
Date: Fri, 8 Oct 2021 12:37:20 -0600
Subject: [PATCH] Delete powershell_reflective_load.test.yml

---
 tests/endpoint/powershell_reflective_load.test.yml | 12 ------------
 1 file changed, 12 deletions(-)
 delete mode 100644 tests/endpoint/powershell_reflective_load.test.yml

diff --git a/tests/endpoint/powershell_reflective_load.test.yml b/tests/endpoint/powershell_reflective_load.test.yml
deleted file mode 100644
index 167a524ebc..0000000000
--- a/tests/endpoint/powershell_reflective_load.test.yml
+++ /dev/null
@@ -1,12 +0,0 @@
-name: Powershell Reflective Load Unit Test
-tests:
-- name: Powershell Reflective Load
-  file: endpoint/powershell_reflective_load.yml
-  pass_condition: '| stats count | where count > 0'
-  earliest_time: '-24h'
-  latest_time: 'now'
-  attack_data:
-  - file_name: powershell.log
-    data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1127.001/regsvr32_silent/powershell.log
-    source: WinEventLog:Microsoft-Windows-PowerShell/Operational
-    sourcetype: WinEventLog
\ No newline at end of file