From dc10c226d1ccc12ecccfaa407c916fc752d3cbab Mon Sep 17 00:00:00 2001 From: research-bot Date: Wed, 30 Oct 2024 16:31:07 -0700 Subject: [PATCH] e --- detections/endpoint/windows_impair_defenses_disable_hvci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/detections/endpoint/windows_impair_defenses_disable_hvci.yml b/detections/endpoint/windows_impair_defenses_disable_hvci.yml index 0a94710152..14662cc921 100644 --- a/detections/endpoint/windows_impair_defenses_disable_hvci.yml +++ b/detections/endpoint/windows_impair_defenses_disable_hvci.yml @@ -61,4 +61,4 @@ tests: attack_data: - data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1562.001/atomic_red_team/hvci_windows-sysmon.log source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - sourcetype: xmlwinevntlog + sourcetype: xmlwineventlog