From 5bb3f16aa56c719a927e231e8117d135ccde2dae Mon Sep 17 00:00:00 2001
From: root <root@ip-10-0-65-45>
Date: Tue, 8 Dec 2020 13:34:34 +0000
Subject: [PATCH] Added detection testing service results inUSN Journal
 Deletion

---
 detections/endpoint/usn_journal_deletion.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/detections/endpoint/usn_journal_deletion.yml b/detections/endpoint/usn_journal_deletion.yml
index 82ac91f6af..03259d6828 100644
--- a/detections/endpoint/usn_journal_deletion.yml
+++ b/detections/endpoint/usn_journal_deletion.yml
@@ -41,3 +41,6 @@ tags:
   - PR.IP
   security_domain: endpoint
   asset_type: Endpoint
+  automated_detection_testing: passed
+  dataset:
+  - https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1070/atomic_red_team/windows-sysmon.log