diff --git a/detections/endpoint/ssa___attempted_credential_dump_from_registry_via_reg_exe/ocsf_old/README.md b/detections/endpoint/ssa___attempted_credential_dump_from_registry_via_reg_exe/ocsf_old/README.md index c9a2fc591d..64eef4e7d2 100644 --- a/detections/endpoint/ssa___attempted_credential_dump_from_registry_via_reg_exe/ocsf_old/README.md +++ b/detections/endpoint/ssa___attempted_credential_dump_from_registry_via_reg_exe/ocsf_old/README.md @@ -1,4 +1,5 @@ OCSF Process Activity Class (old): - http://event-schema.splunk.com/classes/endpoint_process_activity?extensions=splunk + OCSF Finding Report (old): - - http://event-schema.splunk.com/classes/splunk/finding_report?extensions=splunk \ No newline at end of file + - http://event-schema.splunk.com/classes/splunk/finding_report?extensions=splunk