From b96d91740b311f16bfb6830b6fd1f03ef5f701d7 Mon Sep 17 00:00:00 2001 From: tccontre <26181693+tccontre@users.noreply.github.com> Date: Wed, 30 Mar 2022 15:17:11 +0200 Subject: [PATCH] Update recon_avproduct_through_pwh_or_wmi.test.yml --- tests/endpoint/recon_avproduct_through_pwh_or_wmi.test.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/endpoint/recon_avproduct_through_pwh_or_wmi.test.yml b/tests/endpoint/recon_avproduct_through_pwh_or_wmi.test.yml index 270a5c5f93..3b19678e01 100644 --- a/tests/endpoint/recon_avproduct_through_pwh_or_wmi.test.yml +++ b/tests/endpoint/recon_avproduct_through_pwh_or_wmi.test.yml @@ -7,6 +7,6 @@ tests: latest_time: now attack_data: - file_name: windows-powershell-xml.log - data: hhttps://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1592/pwh_av_recon/windows-powershell-xml.log + data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1592/pwh_av_recon/windows-powershell-xml.log source: XmlWinEventLog:Microsoft-Windows-PowerShell/Operational sourcetype: xmlwineventlog