diff --git a/detections/endpoint/suspicious_rundll32__with_no_command_line_arguments.yml b/detections/endpoint/suspicious_rundll32_with_no_command_line_arguments.yml similarity index 100% rename from detections/endpoint/suspicious_rundll32__with_no_command_line_arguments.yml rename to detections/endpoint/suspicious_rundll32_with_no_command_line_arguments.yml diff --git a/tests/endpoint/suspicious_rundll32_with_no_command_line_arguments.test.yml b/tests/endpoint/suspicious_rundll32_with_no_command_line_arguments.test.yml index 917a531d96..145ea7a51f 100644 --- a/tests/endpoint/suspicious_rundll32_with_no_command_line_arguments.test.yml +++ b/tests/endpoint/suspicious_rundll32_with_no_command_line_arguments.test.yml @@ -1,7 +1,7 @@ name: Suspicious rundll32 with no command line arguments Unit Test tests: - name: Suspicious Rundll32 with no Command Line Arguments - file: endpoint/suspicious_rundll32__with_no_command_line_arguments.yml + file: endpoint/suspicious_rundll32_with_no_command_line_arguments.yml pass_condition: '| stats count | where count > 0' earliest_time: '-24h' latest_time: 'now'