fix dataset links for more detections. Note that one of the searches actually does not have a valid dataset - it pointed to one that does not exist. that dataset also did not exist in the git history for attack_data.

detections/endpoint/active_directory_privilege_escalation_identified.yml

@@ -66,10 +66,4 @@ tags:
   - Splunk Enterprise Security
   - Splunk Cloud
   security_domain: endpoint
-tests:
-- name: True Positive Test
-  attack_data:
-  - data: 
-      https://raw.githubusercontent.com/splunk/attack_data/master/datasets/attack_techniques/T1484/privesc/priv_esc.log
-    source: adlm
-    sourcetype: stash
+

detections/endpoint/linux_auditd_sysmon_service_stop.yml

@@ -71,6 +71,6 @@ tests:
 - name: True Positive Test
   attack_data:
   - data: 
-      https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1489/linux_auditd_sysmon_service_stop.log/linux_auditd_sysmon_service_stop.log
+      https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1489/linux_auditd_sysmon_service_stop/linux_auditd_sysmon_service_stop.log
     source: auditd
     sourcetype: auditd

detections/endpoint/log4shell_cve_2021_44228_exploitation.yml

@@ -70,6 +70,6 @@ tests:
 - name: True Positive Test
   attack_data:
   - data: 
-      https://raw.githubusercontent.com/splunk/attack_data/master/datasets/suspicious_behaviour/log4shell_exploitation/log4shell_correlation.txt
+      https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/suspicious_behaviour/log4shell_exploitation/log4shell_correlation.log
     source: log4shell
     sourcetype: stash