Skip to content

Commit 25bf8cf

Browse files
committed
fix attack_data link
1 parent f80f897 commit 25bf8cf

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

detections/endpoint/linux_suspicious_react_or_next_js_child_process.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -155,6 +155,6 @@ tags:
155155
tests:
156156
- name: True Positive Test
157157
attack_data:
158-
- data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/emerging_threats/react2shell/linux_react2shell.log
158+
- data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/emerging_threats/react2shell/react2shell_linux.log
159159
source: Syslog:Linux-Sysmon/Operational
160160
sourcetype: sysmon:linux

detections/endpoint/windows_suspicious_react_or_next_js_child_process.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -156,6 +156,6 @@ tags:
156156
tests:
157157
- name: True Positive Test
158158
attack_data:
159-
- data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/emerging_threats/react2shell/windows_react2shell.log
159+
- data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/emerging_threats/react2shell/react2shell_windows.log
160160
source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational
161161
sourcetype: XmlWinEventLog

0 commit comments

Comments
 (0)