diff --git a/tests/endpoint/ssa___applying_stolen_credentials_via_mimikatz_modules.test.yml b/tests/endpoint/ssa___applying_stolen_credentials_via_mimikatz_modules.test.yml
deleted file mode 100644
index 17f177709e..0000000000
--- a/tests/endpoint/ssa___applying_stolen_credentials_via_mimikatz_modules.test.yml
+++ /dev/null
@@ -1,12 +0,0 @@
-name: Applying Stolen Credentials via Mimikatz modules - SSA Unit test
-tests:
-  - name: Applying Stolen Credentials via Mimikatz modules
-    file: endpoint/ssa___applying_stolen_credentials_via_mimikatz_modules.yml
-    description: Test applying stolen credentials detections
-    pass_condition: '@count_gt(0)'
-    attack_data:
-      - file_name: logAllMimikatzModules.log
-        data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1555/applying_stolen_credentials/logAllMimikatzModules.log
-        source: WinEventLog:Security
-        sourcetype: WinEventLog
-