Fix incorrect Techniques in Convert-SentinelARArmToYaml.tests.ps1

f-bader · Jul 21, 2024 · b294515 · b294515
1 parent 9313a6a
commit b294515
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/tests/Convert-SentinelARArmToYaml.tests.ps1 b/tests/Convert-SentinelARArmToYaml.tests.ps1
@@ -589,7 +589,7 @@ Describe "Simple example tests" {
         It "Merged RelevantTechniques, SubTechniques and Techniques into single property" {
             $converted = Convert-SentinelARArmToYaml -Filename "TestDrive:/Content/TTPWithTacticsNTechniques.json" | ConvertFrom-Yaml
             $converted.subTechniques | Should -Be $null
-            $converted.Techniques -join ", " | Should -Be "T1078.004, T1078.005"
+            $converted.Techniques -join ", " | Should -Be "T1078.003, T1078.004"
         }
     }
 }

diff --git a/tests/examples/TTPWithTacticsNTechniques.json b/tests/examples/TTPWithTacticsNTechniques.json
@@ -52,8 +52,8 @@
         "severity": "High",
         "status": "Available",
         "subTechniques": [
-          "T1078.004",
-          "T1078.005"
+          "T1078.003",
+          "T1078.004"
         ],
         "suppressionDuration": "PT1H",
         "suppressionEnabled": false,
@@ -73,4 +73,4 @@
       "type": "Microsoft.OperationalInsights/workspaces/providers/alertRules"
     }
   ]
-}
+}