test

Author: Patrick Bareiss

.github/workflows/replay-datasets.yml

@@ -26,6 +26,9 @@ jobs:
       with:
         fetch-depth: 0  # Fetch full history for file change detection
 
+    - name: Pull Git LFS files
+      run: git lfs pull
+    
     - name: Set up Python
       uses: actions/setup-python@v4
       with:

datasets/attack_techniques/T1556/disable_lsa_protection_new/disable_lsa_protection_new.yml

@@ -10,4 +10,5 @@ datasets:
 - name: lsa_reg_deletion_modification.log
   path: /datasets/attack_techniques/T1556/disable_lsa_protection_new/lsa_reg_deletion_modification.log
   sourcetype: 'XmlWinEventLog'
-  source: 'XmlWinEventLog:Microsoft-Windows-Sysmon/Operational'
+  source: 'XmlWinEventLog:Microsoft-Windows-Sysmon/Operational'
+