diff --git a/tests/endpoint/windows_service_create_remcomsvc.test.yml b/tests/endpoint/windows_service_create_remcomsvc.test.yml deleted file mode 100644 index 9341d290fb..0000000000 --- a/tests/endpoint/windows_service_create_remcomsvc.test.yml +++ /dev/null @@ -1,13 +0,0 @@ -name: Windows Service Create RemComSvc Unit Test -tests: -- name: Windows Service Create RemComSvc - file: endpoint/windows_service_create_remcomsvc.yml - pass_condition: '| stats count | where count > 0' - earliest_time: -24h - latest_time: now - attack_data: - - file_name: remcom_windows-system.log - data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1543.003/atomic_red_team/remcom_windows-system.log - source: XmlWinEventLog:System - sourcetype: XmlWinEventLog - update_timestamp: true