Skip to content

Commit 150ed40

Browse files
committed
πŸ› fix: correct regression test match counts
1 parent 8eaafff commit 150ed40

4 files changed

Lines changed: 4 additions & 4 deletions

File tree

  • regression_data/rules/windows
    • file/file_event
      • file_event_win_anydesk_artefact
      • file_event_win_cred_dump_tools_dropped_files
    • registry/registry_set
      • registry_set_change_security_zones
      • registry_set_disable_administrative_share

β€Žregression_data/rules/windows/file/file_event/file_event_win_anydesk_artefact/info.ymlβ€Ž

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,5 +9,5 @@ regression_tests_info:
99
- name: Positive Detection Test
1010
type: evtx
1111
provider: Microsoft-Windows-Sysmon
12-
match_count: 1
12+
match_count: 3
1313
path: regression_data/rules/windows/file/file_event/file_event_win_anydesk_artefact/0b9ad457-2554-44c1-82c2-d56a99c42377.evtx

β€Žregression_data/rules/windows/file/file_event/file_event_win_cred_dump_tools_dropped_files/info.ymlβ€Ž

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,5 +9,5 @@ regression_tests_info:
99
- name: Positive Detection Test
1010
type: evtx
1111
provider: Microsoft-Windows-Sysmon
12-
match_count: 1
12+
match_count: 3
1313
path: regression_data/rules/windows/file/file_event/file_event_win_cred_dump_tools_dropped_files/8fbf3271-1ef6-4e94-8210-03c2317947f6.evtx

β€Žregression_data/rules/windows/registry/registry_set/registry_set_change_security_zones/info.ymlβ€Ž

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,5 +9,5 @@ regression_tests_info:
99
- name: Positive Detection Test
1010
type: evtx
1111
provider: Microsoft-Windows-Sysmon
12-
match_count: 1
12+
match_count: 3
1313
path: regression_data/rules/windows/registry/registry_set/registry_set_change_security_zones/45e112d0-7759-4c2a-aa36-9f8fb79d3393.evtx

β€Žregression_data/rules/windows/registry/registry_set/registry_set_disable_administrative_share/info.ymlβ€Ž

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,5 +9,5 @@ regression_tests_info:
99
- name: Positive Detection Test
1010
type: evtx
1111
provider: Microsoft-Windows-Sysmon
12-
match_count: 1
12+
match_count: 2
1313
path: regression_data/rules/windows/registry/registry_set/registry_set_disable_administrative_share/c7dcacd0-cc59-4004-b0a4-1d6cdebe6f3e.evtx

0 commit comments

Comments
Β (0)