Add manual_test flag

splunk · Jan 8, 2025 · 557fdec · 557fdec
1 parent 2627b4b
commit 557fdec
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/detections/endpoint/detect_remote_access_software_usage_registry.yml b/detections/endpoint/detect_remote_access_software_usage_registry.yml
@@ -83,6 +83,7 @@ tags:
   - Registry.registry_key_name
   risk_score: 25
   security_domain: endpoint
+  manual_test: This detection uses A&I lookups from Enterprise Security.
 tests:
 - name: True Positive Test
   attack_data: