From 37f3c4a567832f048d3e2a42a2b48f9a9cefa851 Mon Sep 17 00:00:00 2001
From: bpatel <bpatel@splunk.com>
Date: Tue, 5 Jan 2021 15:19:04 -0800
Subject: [PATCH 1/3] testing weaponization

---
 detections/cloud/abnormally_high_cloud_instances_destroyed.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/detections/cloud/abnormally_high_cloud_instances_destroyed.yml b/detections/cloud/abnormally_high_cloud_instances_destroyed.yml
index ab1fa4ca06..b0bddeac5a 100644
--- a/detections/cloud/abnormally_high_cloud_instances_destroyed.yml
+++ b/detections/cloud/abnormally_high_cloud_instances_destroyed.yml
@@ -34,6 +34,7 @@ tags:
   - Cloud Cryptomining
   kill_chain_phases:
   - Actions on Objectives
+  - Weaponization
   mitre_attack_id:
   - T1078.004
   cis20:

From a48bb73192da295c25428b76ddb99791655471a2 Mon Sep 17 00:00:00 2001
From: bpatel <bpatel@splunk.com>
Date: Tue, 5 Jan 2021 15:41:22 -0800
Subject: [PATCH 2/3] updating ID

---
 package/default/data/ui/views/escu_summary.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package/default/data/ui/views/escu_summary.xml b/package/default/data/ui/views/escu_summary.xml
index f06d1eac19..8e24503e2c 100644
--- a/package/default/data/ui/views/escu_summary.xml
+++ b/package/default/data/ui/views/escu_summary.xml
@@ -146,7 +146,7 @@
                     </div>
                     <div class="killchain_card notfirst">
                         <div class="killchain" style="background-color:#675551;">
-                            <div class="killchain-text" id="weaponize">0</div>
+                            <div class="killchain-text" id="weaponization">0</div>
                         </div>
                         <div>
                             <p class="killchain-label">Weaponization</p>

From 81062b45a9767b367b0efd34e0c91bb7fdb6dacf Mon Sep 17 00:00:00 2001
From: bpatel <bpatel@splunk.com>
Date: Tue, 5 Jan 2021 15:46:24 -0800
Subject: [PATCH 3/3] remove weaponization from test

---
 detections/cloud/abnormally_high_cloud_instances_destroyed.yml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/detections/cloud/abnormally_high_cloud_instances_destroyed.yml b/detections/cloud/abnormally_high_cloud_instances_destroyed.yml
index b0bddeac5a..ab1fa4ca06 100644
--- a/detections/cloud/abnormally_high_cloud_instances_destroyed.yml
+++ b/detections/cloud/abnormally_high_cloud_instances_destroyed.yml
@@ -34,7 +34,6 @@ tags:
   - Cloud Cryptomining
   kill_chain_phases:
   - Actions on Objectives
-  - Weaponization
   mitre_attack_id:
   - T1078.004
   cis20: