From dc80d8ea364e07aa7318a48acc80a54645f07cc5 Mon Sep 17 00:00:00 2001
From: pyth0n1c <87383215+pyth0n1c@users.noreply.github.com>
Date: Tue, 21 Feb 2023 16:25:24 -0800
Subject: [PATCH] Fixed up some incorrect paths in test and detection files.

---
 ...t_of_disabled_users_failed_to_auth_using_kerberos.yml} | 0
 ...bled_users_failed_to_authenticate_w_kerberos.test.yml} | 8 ++++----
 2 files changed, 4 insertions(+), 4 deletions(-)
 rename detections/endpoint/{windows_unusual_count_of_disabled_users_failed_to_authe_using_kerberos.yml => windows_unusual_count_of_disabled_users_failed_to_auth_using_kerberos.yml} (100%)
 rename tests/endpoint/{windows_multiple_disabled_users_failed_to_authenticate_wth_kerberos.test.yml => windows_multiple_disabled_users_failed_to_authenticate_w_kerberos.test.yml} (76%)

diff --git a/detections/endpoint/windows_unusual_count_of_disabled_users_failed_to_authe_using_kerberos.yml b/detections/endpoint/windows_unusual_count_of_disabled_users_failed_to_auth_using_kerberos.yml
similarity index 100%
rename from detections/endpoint/windows_unusual_count_of_disabled_users_failed_to_authe_using_kerberos.yml
rename to detections/endpoint/windows_unusual_count_of_disabled_users_failed_to_auth_using_kerberos.yml
diff --git a/tests/endpoint/windows_multiple_disabled_users_failed_to_authenticate_wth_kerberos.test.yml b/tests/endpoint/windows_multiple_disabled_users_failed_to_authenticate_w_kerberos.test.yml
similarity index 76%
rename from tests/endpoint/windows_multiple_disabled_users_failed_to_authenticate_wth_kerberos.test.yml
rename to tests/endpoint/windows_multiple_disabled_users_failed_to_authenticate_w_kerberos.test.yml
index 791a19829a..493bf7a4f7 100644
--- a/tests/endpoint/windows_multiple_disabled_users_failed_to_authenticate_wth_kerberos.test.yml
+++ b/tests/endpoint/windows_multiple_disabled_users_failed_to_authenticate_w_kerberos.test.yml
@@ -1,7 +1,7 @@
-name: Windows Multiple Disabled Users Failed To Authenticate Wth Kerberos Unit Test
+name: Windows Multiple Disabled Users Failed To Authenticate W Kerberos Unit Test
 tests:
-- name: Windows Multiple Disabled Users Failed To Authenticate Wth Kerberos
-  file: endpoint/windows_multiple_disabled_users_failed_to_authenticate_wth_kerberos.yml
+- name: Windows Multiple Disabled Users Failed To Authenticate W Kerberos
+  file: endpoint/windows_multiple_disabled_users_failed_to_authenticate_w_kerberos.yml
   pass_condition: '| stats count | where count > 0'
   earliest_time: -24h
   latest_time: now
@@ -9,4 +9,4 @@ tests:
   - file_name: windows-security.log
     data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1110.003/purplesharp_disabled_users_kerberos_xml/windows-security.log
     source: XmlWinEventLog:Security
-    sourcetype: XmlWinEventLog
\ No newline at end of file
+    sourcetype: XmlWinEventLog