log

splunk · Oct 29, 2024 · 3298d7e · 3298d7e
1 parent b640a76
commit 3298d7e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/detections/endpoint/detect_critical_alerts_from_security_tools.yml b/detections/endpoint/detect_critical_alerts_from_security_tools.yml
@@ -70,6 +70,6 @@ tests:
     sourcetype: mscs:azure:eventhub:defender:advancedhunting
 - name: True Positive Test
   attack_data:
-  - data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/suspicious_behaviour/alerts/defender_incident_alerts.txt
+  - data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/suspicious_behaviour/alerts/defender_incident_alerts.log
     source: m365_defender_incident_alerts
     sourcetype: ms365:defender:incident:alerts