diff --git a/splunk_alert.md b/splunk_alert.md
index 2219bed..b387dbf 100644
--- a/splunk_alert.md
+++ b/splunk_alert.md
@@ -10,7 +10,7 @@ mitre_subtechnique_id="",
 apt="",
 mitre_link="https://attack.mitre.org/techniques/T",
 creator="Cpl Iverson",
-last_updated="",
+last_tested="",
 upload_date="2024-01-01",
 last_modify_date="2025-01-09",
 mitre_version="v16",
@@ -18,7 +18,7 @@ priority=""
 | `process_create_whitelist` 
 | eval indextime = _indextime 
 | convert ctime(indextime) 
-| table _time indextime event_description hash_sha256 host_fqdn user_name original_file_name process_path process_guid process_parent_path process_id process_parent_id process_command_line process_parent_command_line process_parent_guid mitre_category mitre_technique mitre_technique_id hunting_trigger mitre_subtechnique mitre_subtechnique_id apt mitre_link creator upload_date last_modify_date mitre_version priority
+| table _time indextime event_description hash_sha256 host_fqdn user_name original_file_name process_path process_guid process_parent_path process_id process_parent_id process_command_line process_parent_command_line process_parent_guid mitre_category mitre_technique mitre_technique_id hunting_trigger mitre_subtechnique mitre_subtechnique_id apt mitre_link last_tested creator upload_date last_modify_date mitre_version priority
 | collect `jarvis_index`
 ```