From f2f3eb32312dfd05dbb047a65f37a6115ff716f6 Mon Sep 17 00:00:00 2001 From: tccontre Date: Thu, 18 Nov 2021 13:00:20 +0100 Subject: [PATCH] ioc_detections --- tests/endpoint/loading_of_dynwrapx_module.test.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tests/endpoint/loading_of_dynwrapx_module.test.yml b/tests/endpoint/loading_of_dynwrapx_module.test.yml index 3c7b55ad5d..b5ed4b6cbb 100644 --- a/tests/endpoint/loading_of_dynwrapx_module.test.yml +++ b/tests/endpoint/loading_of_dynwrapx_module.test.yml @@ -6,7 +6,7 @@ tests: earliest_time: '-24h' latest_time: 'now' attack_data: - - file_name: sysmon.log - data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/malware/remcos/remcos_dynwrapx/sysmon.log + - file_name: windows-sysmon.log + data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/malware/remcos/remcos_dynwrapx/windows-sysmon.log source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational sourcetype: xmlwineventlog \ No newline at end of file