From bc508128e9be092296c5b8a3045fb100030c7a3f Mon Sep 17 00:00:00 2001 From: mhaag-spl <76067280+mhaag-spl@users.noreply.github.com> Date: Tue, 9 Feb 2021 11:27:19 -0700 Subject: [PATCH] misspell --- ...l => suspicious_rundll32_with_no_command_line_arguments.yml} | 0 .../suspicious_rundll32_with_no_command_line_arguments.test.yml | 2 +- 2 files changed, 1 insertion(+), 1 deletion(-) rename detections/endpoint/{suspicious_rundll32__with_no_command_line_arguments.yml => suspicious_rundll32_with_no_command_line_arguments.yml} (100%) diff --git a/detections/endpoint/suspicious_rundll32__with_no_command_line_arguments.yml b/detections/endpoint/suspicious_rundll32_with_no_command_line_arguments.yml similarity index 100% rename from detections/endpoint/suspicious_rundll32__with_no_command_line_arguments.yml rename to detections/endpoint/suspicious_rundll32_with_no_command_line_arguments.yml diff --git a/tests/endpoint/suspicious_rundll32_with_no_command_line_arguments.test.yml b/tests/endpoint/suspicious_rundll32_with_no_command_line_arguments.test.yml index 917a531d96..145ea7a51f 100644 --- a/tests/endpoint/suspicious_rundll32_with_no_command_line_arguments.test.yml +++ b/tests/endpoint/suspicious_rundll32_with_no_command_line_arguments.test.yml @@ -1,7 +1,7 @@ name: Suspicious rundll32 with no command line arguments Unit Test tests: - name: Suspicious Rundll32 with no Command Line Arguments - file: endpoint/suspicious_rundll32__with_no_command_line_arguments.yml + file: endpoint/suspicious_rundll32_with_no_command_line_arguments.yml pass_condition: '| stats count | where count > 0' earliest_time: '-24h' latest_time: 'now'