diff --git a/detections/endpoint/windows_unusual_count_of_disabled_users_failed_to_authe_using_kerberos.yml b/detections/endpoint/windows_unusual_count_of_disabled_users_failed_to_auth_using_kerberos.yml similarity index 100% rename from detections/endpoint/windows_unusual_count_of_disabled_users_failed_to_authe_using_kerberos.yml rename to detections/endpoint/windows_unusual_count_of_disabled_users_failed_to_auth_using_kerberos.yml diff --git a/tests/endpoint/windows_multiple_disabled_users_failed_to_authenticate_wth_kerberos.test.yml b/tests/endpoint/windows_multiple_disabled_users_failed_to_authenticate_w_kerberos.test.yml similarity index 76% rename from tests/endpoint/windows_multiple_disabled_users_failed_to_authenticate_wth_kerberos.test.yml rename to tests/endpoint/windows_multiple_disabled_users_failed_to_authenticate_w_kerberos.test.yml index 791a19829a..493bf7a4f7 100644 --- a/tests/endpoint/windows_multiple_disabled_users_failed_to_authenticate_wth_kerberos.test.yml +++ b/tests/endpoint/windows_multiple_disabled_users_failed_to_authenticate_w_kerberos.test.yml @@ -1,7 +1,7 @@ -name: Windows Multiple Disabled Users Failed To Authenticate Wth Kerberos Unit Test +name: Windows Multiple Disabled Users Failed To Authenticate W Kerberos Unit Test tests: -- name: Windows Multiple Disabled Users Failed To Authenticate Wth Kerberos - file: endpoint/windows_multiple_disabled_users_failed_to_authenticate_wth_kerberos.yml +- name: Windows Multiple Disabled Users Failed To Authenticate W Kerberos + file: endpoint/windows_multiple_disabled_users_failed_to_authenticate_w_kerberos.yml pass_condition: '| stats count | where count > 0' earliest_time: -24h latest_time: now @@ -9,4 +9,4 @@ tests: - file_name: windows-security.log data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1110.003/purplesharp_disabled_users_kerberos_xml/windows-security.log source: XmlWinEventLog:Security - sourcetype: XmlWinEventLog \ No newline at end of file + sourcetype: XmlWinEventLog