Files
splunk-security_content/tests/cloud/github_dependabot_alert.test.yml
T
2022-03-09 14:43:09 +01:00

13 lines
513 B
YAML

name: GitHub Dependabot Alert Unit Test
tests:
- name: GitHub Dependabot Alert
file: cloud/github_dependabot_alert.yml
pass_condition: '| stats count | where count > 0'
earliest_time: -365d
latest_time: now
attack_data:
- file_name: github_security_advisor_alert.json
data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1195.001/github_security_advisor_alert/github_security_advisor_alert.json
sourcetype: aws:firehose:json
source: github