Tweaking attack_data links

detections/application/m365_copilot_agentic_jailbreak_attack.yml

@@ -54,6 +54,6 @@ tags:
 tests:
     - name: True Positive Test
       attack_data:
-        - data: https://raw.githubusercontent.com/splunk/attack_data/master/datasets/m365_copilot/copilot_prompt_logs.csv
+        - data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/m365_copilot/copilot_prompt_logs.csv
           sourcetype: csv
           source: csv

detections/application/m365_copilot_impersonation_jailbreak_attack.yml

@@ -58,6 +58,6 @@ tags:
 tests:
     - name: True Positive Test
       attack_data:
-        - data: https://raw.githubusercontent.com/splunk/attack_data/master/datasets/m365_copilot/copilot_prompt_logs.csv
+        - data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/m365_copilot/copilot_prompt_logs.csv
           sourcetype: csv
           source: csv

detections/application/m365_copilot_information_extraction_jailbreak_attack.yml

@@ -53,6 +53,6 @@ tags:
 tests:
     - name: True Positive Test
       attack_data:
-        - data: https://raw.githubusercontent.com/splunk/attack_data/master/datasets/m365_copilot/copilot_prompt_logs.csv
+        - data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/m365_copilot/copilot_prompt_logs.csv
           sourcetype: csv
           source: csv

detections/application/m365_copilot_jailbreak_attempts.yml

@@ -63,6 +63,6 @@ tags:
 tests:
     - name: True Positive Test
       attack_data:
-        - data: https://raw.githubusercontent.com/splunk/attack_data/master/datasets/m365_copilot/copilot_prompt_logs.csv
+        - data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/m365_copilot/copilot_prompt_logs.csv
           sourcetype: csv
           source: csv

detections/endpoint/kerberos_pre_authentication_flag_disabled_in_useraccountcontrol.yml

@@ -51,6 +51,6 @@ tags:
 tests:
     - name: True Positive Test
       attack_data:
-        - data: https://media.githubusercontent.com/media/splunk/attack_data/refs/heads/master/datasets/attack_techniques/T1558.004/powershell/windows-security-xml.log
+        - data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1558.004/powershell/windows-security-xml.log
           source: XmlWinEventLog:Security
           sourcetype: XmlWinEventLog

detections/endpoint/windows_powershell_process_implementing_manual_base64_decoder.yml

@@ -94,6 +94,6 @@ tags:
 tests:
     - name: True Positive
       attack_data:
-        - data: https://github.com/Splunk/attack_data/raw/master/datasets/attack_techniques/T1027.010/manual_b64_decode_pwsh/manual_b64_decode_pwsh.log
+        - data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1027.010/manual_b64_decode_pwsh/manual_b64_decode_pwsh.log
           source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational
           sourcetype: XmlWinEventLog

detections/endpoint/windows_pstools_recon_usage.yml

@@ -118,6 +118,6 @@ tags:
 tests:
     - name: True Positive
       attack_data:
-        - data: https://github.com/Splunk/attack_data/raw/master/datasets/attack_techniques/T1082/sysinternals_pstools/sysinternals_pstools.log
+        - data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1082/sysinternals_pstools/sysinternals_pstools.log
           source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational
           sourcetype: XmlWinEventLog

detections/endpoint/windows_tor_client_execution.yml

@@ -95,6 +95,6 @@ tags:
 tests:
     - name: True Positive Test
       attack_data:
-        - data: https://media.githubusercontent.com/media/splunk/attack_data/refs/heads/master/datasets/attack_techniques/T1090.003/windows_tor_client_execution/windows-sysmon.log
+        - data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1090.003/windows_tor_client_execution/windows-sysmon.log
           sourcetype: XmlWinEventLog
           source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational