From e1a7371e75aba9bcbf2a9440d97840206d317d01 Mon Sep 17 00:00:00 2001
From: tccontre <26181693+tccontre@users.noreply.github.com>
Date: Wed, 30 Jun 2021 16:18:58 +0200
Subject: [PATCH] Delete ssa___delete_a_net_user.test.yml

---
 tests/endpoint/ssa___delete_a_net_user.test.yml | 10 ----------
 1 file changed, 10 deletions(-)
 delete mode 100644 tests/endpoint/ssa___delete_a_net_user.test.yml

diff --git a/tests/endpoint/ssa___delete_a_net_user.test.yml b/tests/endpoint/ssa___delete_a_net_user.test.yml
deleted file mode 100644
index bfe2de587b..0000000000
--- a/tests/endpoint/ssa___delete_a_net_user.test.yml
+++ /dev/null
@@ -1,10 +0,0 @@
-name: Delete A Net User Unit Test
-tests:
-  - name: Delete A Net User
-    file: endpoint/ssa___delete_a_net_user.yml
-    pass_condition: '@count_gt(0)'
-    description: Test for usage of net.exe or net1.exe to delete net user
-    attack_data:
-      - file_name: net_user_del.log
-        data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/malware/ransomware_ttp/ssa_data1/net_user_del.log
-        source: WinEventLog:Security
\ No newline at end of file