From e86eb625fbd24cc19f95774baa1e5a3ad26edb99 Mon Sep 17 00:00:00 2001 From: tcontreras Date: Fri, 23 Apr 2021 14:07:00 +0200 Subject: [PATCH] stream_source --- tests/network/multiple_archive_files_http_post_traffic.test.yml | 2 +- tests/network/plain_http_post_exfiltrated_data.test.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/tests/network/multiple_archive_files_http_post_traffic.test.yml b/tests/network/multiple_archive_files_http_post_traffic.test.yml index ecda4cc4d2..064a806cb4 100644 --- a/tests/network/multiple_archive_files_http_post_traffic.test.yml +++ b/tests/network/multiple_archive_files_http_post_traffic.test.yml @@ -8,5 +8,5 @@ tests: attack_data: - file_name: stream_http_events.log data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1048.003/plain_exfil_data/stream_http_events.log - source: stream:http + source: stream sourcetype: stream:http \ No newline at end of file diff --git a/tests/network/plain_http_post_exfiltrated_data.test.yml b/tests/network/plain_http_post_exfiltrated_data.test.yml index 91ad3ce097..bba80cefd2 100644 --- a/tests/network/plain_http_post_exfiltrated_data.test.yml +++ b/tests/network/plain_http_post_exfiltrated_data.test.yml @@ -8,7 +8,7 @@ tests: attack_data: - file_name: stream_http_events.log data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1048.003/archive_http_post/stream_http_events.log - source: stream:http + source: stream sourcetype: stream:http