File tree Expand file tree Collapse file tree
regression_data/rules/windows
file_event_win_anydesk_artefact
file_event_win_cred_dump_tools_dropped_files
registry_set_change_security_zones
registry_set_disable_administrative_share Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -9,5 +9,5 @@ regression_tests_info:
99 - name : Positive Detection Test
1010 type : evtx
1111 provider : Microsoft-Windows-Sysmon
12- match_count : 1
12+ match_count : 3
1313 path : regression_data/rules/windows/file/file_event/file_event_win_anydesk_artefact/0b9ad457-2554-44c1-82c2-d56a99c42377.evtx
Original file line number Diff line number Diff line change @@ -9,5 +9,5 @@ regression_tests_info:
99 - name : Positive Detection Test
1010 type : evtx
1111 provider : Microsoft-Windows-Sysmon
12- match_count : 1
12+ match_count : 3
1313 path : regression_data/rules/windows/file/file_event/file_event_win_cred_dump_tools_dropped_files/8fbf3271-1ef6-4e94-8210-03c2317947f6.evtx
Original file line number Diff line number Diff line change @@ -9,5 +9,5 @@ regression_tests_info:
99 - name : Positive Detection Test
1010 type : evtx
1111 provider : Microsoft-Windows-Sysmon
12- match_count : 1
12+ match_count : 3
1313 path : regression_data/rules/windows/registry/registry_set/registry_set_change_security_zones/45e112d0-7759-4c2a-aa36-9f8fb79d3393.evtx
Original file line number Diff line number Diff line change @@ -9,5 +9,5 @@ regression_tests_info:
99 - name : Positive Detection Test
1010 type : evtx
1111 provider : Microsoft-Windows-Sysmon
12- match_count : 1
12+ match_count : 2
1313 path : regression_data/rules/windows/registry/registry_set/registry_set_disable_administrative_share/c7dcacd0-cc59-4004-b0a4-1d6cdebe6f3e.evtx
You canβt perform that action at this time.
0 commit comments