This commit is contained in:
mhaag-spl
2021-02-09 11:27:19 -07:00
parent c34083adf3
commit bc508128e9
2 changed files with 1 additions and 1 deletions
@@ -1,7 +1,7 @@
name: Suspicious rundll32 with no command line arguments Unit Test
tests:
- name: Suspicious Rundll32 with no Command Line Arguments
file: endpoint/suspicious_rundll32__with_no_command_line_arguments.yml
file: endpoint/suspicious_rundll32_with_no_command_line_arguments.yml
pass_condition: '| stats count | where count > 0'
earliest_time: '-24h'
latest_time: 'now'