From ee9330e03fba2850892fcd2dfd94e1895756beeb Mon Sep 17 00:00:00 2001
From: root <root@ip-10-0-7-173>
Date: Wed, 4 Nov 2020 12:12:26 +0000
Subject: [PATCH] Added detection testing service results inCreation of Shadow
 Copy

---
 detections/endpoint/creation_of_shadow_copy.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/detections/endpoint/creation_of_shadow_copy.yml b/detections/endpoint/creation_of_shadow_copy.yml
index eafeb29b42..b966c4e48c 100644
--- a/detections/endpoint/creation_of_shadow_copy.yml
+++ b/detections/endpoint/creation_of_shadow_copy.yml
@@ -36,3 +36,6 @@ tags:
   - DE.CM
   security_domain: endpoint
   asset_type: Endpoint
+  automated_detection_testing: passed
+  dataset:
+  - https://attack-range-attack-data.s3-us-west-2.amazonaws.com/T1003.003/windows-sysmon.log