From f18542b2142cddeda75cd33ffdc2fc2b0606d6b5 Mon Sep 17 00:00:00 2001
From: mhaag-spl <5632822+MHaggis@users.noreply.github.com>
Date: Wed, 14 Apr 2021 21:23:30 -0600
Subject: [PATCH] Update winevent_scheduled_task_created_within_public_path.yml

---
 .../winevent_scheduled_task_created_within_public_path.yml      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/detections/endpoint/winevent_scheduled_task_created_within_public_path.yml b/detections/endpoint/winevent_scheduled_task_created_within_public_path.yml
index 9d8afe60da..e87362699b 100644
--- a/detections/endpoint/winevent_scheduled_task_created_within_public_path.yml
+++ b/detections/endpoint/winevent_scheduled_task_created_within_public_path.yml
@@ -28,7 +28,7 @@ references:
   - https://research.checkpoint.com/2021/irans-apt34-returns-with-an-updated-arsenal/
   - https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventID=4698
   - https://redcanary.com/threat-detection-report/techniques/scheduled-task-job/
-  - https://docs.microsoft.com/en-us/windows/win32/taskschd/time-trigger-example--scripting-?redirectedfrom=MSDN
+  - https://docs.microsoft.com/en-us/windows/win32/taskschd/time-trigger-example--scripting
   analytic_story:
   - Windows Persistence Techniques
   - Ransomware