From f6fa021edc949efccec5bec343bda3b4b75871c7 Mon Sep 17 00:00:00 2001
From: miskoSplunk <68617976+miskoSplunk@users.noreply.github.com>
Date: Fri, 26 Feb 2021 14:08:49 -0800
Subject: [PATCH] Delete
 ssa___illegal_log_deletion_via_mimikatz_modules.test.yml

---
 ...llegal_log_deletion_via_mimikatz_modules.test.yml | 12 ------------
 1 file changed, 12 deletions(-)
 delete mode 100644 tests/endpoint/ssa___illegal_log_deletion_via_mimikatz_modules.test.yml

diff --git a/tests/endpoint/ssa___illegal_log_deletion_via_mimikatz_modules.test.yml b/tests/endpoint/ssa___illegal_log_deletion_via_mimikatz_modules.test.yml
deleted file mode 100644
index f2edfb66e3..0000000000
--- a/tests/endpoint/ssa___illegal_log_deletion_via_mimikatz_modules.test.yml
+++ /dev/null
@@ -1,12 +0,0 @@
-name: Illegal Deletion of Logs via Mimikatz modules - SSA Unit test
-tests:
-  - name: Illegal Deletion of Logs via Mimikatz modules 
-    file: endpoint/ssa___illegal_log_deletion_via_mimikatz_modules.yml
-    pass_condition: '@count_gt(0)'
-    description: Test illegal log deletion detections
-    attack_data:
-      - file_name: logAllMimikatzModules.log
-        data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1070/illegal_log_deletion/logAllMimikatzModules.log
-        source: WinEventLog:Security
-        sourcetype: WinEventLog
-