mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
Update suspicious_scheduled_task_from_public_directory.test.yml
This commit is contained in:
@@ -1,7 +1,7 @@
|
||||
name: Suspicious Scheduled Task from Public Directory Unit Test
|
||||
tests:
|
||||
- name: Suspicious Scheduled Task from Public Directory
|
||||
file: detections/endpoint/suspicious_scheduled_task_from_public_directory.yml
|
||||
file: endpoint/suspicious_scheduled_task_from_public_directory.yml
|
||||
pass_condition: '| stats count | where count > 0'
|
||||
earliest_time: '-24h'
|
||||
latest_time: 'now'
|
||||
|
||||
Reference in New Issue
Block a user