Add manual_test flag

patel-bhavin · web-flow · commit 557fdeca897f · 2025-01-08T10:21:40.000-08:00
diff --git a/detections/endpoint/detect_remote_access_software_usage_registry.yml b/detections/endpoint/detect_remote_access_software_usage_registry.yml
@@ -83,6 +83,7 @@ tags:
   - Registry.registry_key_name
   risk_score: 25
   security_domain: endpoint
+  manual_test: This detection uses A&I lookups from Enterprise Security.
 tests:
 - name: True Positive Test
   attack_data:
