From aebcc438f4e8f586944a7b40a39eb9c5232dc2ee Mon Sep 17 00:00:00 2001 From: mvelazco Date: Fri, 12 Nov 2021 14:45:56 -0500 Subject: [PATCH] fixing test yml --- .../remote_process_instantiation_via_winrm_and_winrs.test.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/endpoint/remote_process_instantiation_via_winrm_and_winrs.test.yml b/tests/endpoint/remote_process_instantiation_via_winrm_and_winrs.test.yml index 8458cfc152..ae91c93058 100644 --- a/tests/endpoint/remote_process_instantiation_via_winrm_and_winrs.test.yml +++ b/tests/endpoint/remote_process_instantiation_via_winrm_and_winrs.test.yml @@ -7,6 +7,6 @@ tests: latest_time: 'now' attack_data: - file_name: windows-sysmon.log - data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1021.006/atomic_red_team/windows-sysmon.log + data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1021.006/lateral_movement/windows-sysmon.log source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational sourcetype: xmlwineventlog