diff --git a/tests/endpoint/excessive_number_of_taskhost_processes.test.yml b/tests/endpoint/excessive_number_of_taskhost_processes.test.yml index c4fa903896..8fc97f291b 100644 --- a/tests/endpoint/excessive_number_of_taskhost_processes.test.yml +++ b/tests/endpoint/excessive_number_of_taskhost_processes.test.yml @@ -1,7 +1,7 @@ name: Excessive number of taskhost processes Unit Test tests: - name: Excessive number of taskhost processes - file: detections/endpoint/excessive_number_of_taskhost_processes.yml + file: endpoint/excessive_number_of_taskhost_processes.yml pass_condition: '| stats count | where count > 0' earliest_time: '-24h' latest_time: 'now'