From 9487fd704e268f78c5ca4155bf700f6e55640dbf Mon Sep 17 00:00:00 2001 From: patel-bhavin Date: Fri, 10 Dec 2021 12:46:31 -0800 Subject: [PATCH] minor --- .../ssa___windows_curl_upload_to_remote_destination.yml | 4 ++-- .../ssa___windows_curl_upload_to_remote_destination.test.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/detections/endpoint/ssa___windows_curl_upload_to_remote_destination.yml b/detections/endpoint/ssa___windows_curl_upload_to_remote_destination.yml index 03049346b9..b771f23153 100644 --- a/detections/endpoint/ssa___windows_curl_upload_to_remote_destination.yml +++ b/detections/endpoint/ssa___windows_curl_upload_to_remote_destination.yml @@ -1,7 +1,7 @@ name: Windows Curl Upload to Remote Destination id: cc8d046a-543b-11ec-b864-acde48001122 -version: 1 -date: '2021-12-03' +version: 2 +date: '2021-12-10' author: Michael Haag, Splunk type: TTP datamodel: diff --git a/tests/endpoint/ssa___windows_curl_upload_to_remote_destination.test.yml b/tests/endpoint/ssa___windows_curl_upload_to_remote_destination.test.yml index b92fd512b0..35bf0a03a3 100644 --- a/tests/endpoint/ssa___windows_curl_upload_to_remote_destination.test.yml +++ b/tests/endpoint/ssa___windows_curl_upload_to_remote_destination.test.yml @@ -6,4 +6,4 @@ tests: attack_data: - file_name: windows-security.log data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1105/atomic_red_team/windows-security.log - source: WinEventLog:security \ No newline at end of file + source: WinEventLog:Security \ No newline at end of file