Add XML data

splunk · Apr 11, 2024 · e4a993a · e4a993a
1 parent 86127f4
commit e4a993a
Show file tree

Hide file tree

Showing 35 changed files with 105 additions and 0 deletions.
diff --git a/datasets/attack_techniques/T1003.002/serioussam/windows-xml.log b/datasets/attack_techniques/T1003.002/serioussam/windows-xml.log
diff --git a/...echniques/T1018/windows_get_adcomputer_unconstrained_delegation_discovery/windows-xml.log b/...echniques/T1018/windows_get_adcomputer_unconstrained_delegation_discovery/windows-xml.log
diff --git a/...ttack_techniques/T1018/windows_powerview_constrained_delegation_discovery/windows-xml.log b/...ttack_techniques/T1018/windows_powerview_constrained_delegation_discovery/windows-xml.log
diff --git a/datasets/attack_techniques/T1053.005/svchost_lolbas_execution_process_spawn/windows-xml.log b/datasets/attack_techniques/T1053.005/svchost_lolbas_execution_process_spawn/windows-xml.log
diff --git a/...ttack_techniques/T1053.005/winevent_scheduled_task_created_to_spawn_shell/windows-xml.log b/...ttack_techniques/T1053.005/winevent_scheduled_task_created_to_spawn_shell/windows-xml.log
diff --git a/...ts/attack_techniques/T1059/excessive_distinct_processes_from_windows_temp/windows-xml.log b/...ts/attack_techniques/T1059/excessive_distinct_processes_from_windows_temp/windows-xml.log
diff --git a/..._techniques/T1069.002/domain_group_discovery_with_adsisearcher/windows-powershell-xml.log b/..._techniques/T1069.002/domain_group_discovery_with_adsisearcher/windows-powershell-xml.log
diff --git a/datasets/attack_techniques/T1070.001/suspicious_event_log_service_behavior/windows-xml.log b/datasets/attack_techniques/T1070.001/suspicious_event_log_service_behavior/windows-xml.log
diff --git a/...ts/attack_techniques/T1070.001/suspicious_kerberos_service_ticket_request/windows-xml.log b/...ts/attack_techniques/T1070.001/suspicious_kerberos_service_ticket_request/windows-xml.log
diff --git a/datasets/attack_techniques/T1070.001/windows_event_log_cleared/windows-xml.log b/datasets/attack_techniques/T1070.001/windows_event_log_cleared/windows-xml.log
diff --git a/datasets/attack_techniques/T1078.002/account_lockout/windows-xml-1.log b/datasets/attack_techniques/T1078.002/account_lockout/windows-xml-1.log
diff --git a/datasets/attack_techniques/T1078.002/suspicious_computer_account_name_change/windows-xml.log b/datasets/attack_techniques/T1078.002/suspicious_computer_account_name_change/windows-xml.log
diff --git a/...ets/attack_techniques/T1078.002/suspicious_ticket_granting_ticket_request/windows-xml.log b/...ets/attack_techniques/T1078.002/suspicious_ticket_granting_ticket_request/windows-xml.log
diff --git a/datasets/attack_techniques/T1087/enumerate_users_local_group_using_telegram/windows-xml.log b/datasets/attack_techniques/T1087/enumerate_users_local_group_using_telegram/windows-xml.log
diff --git a/datasets/attack_techniques/T1187/petitpotam/windows-xml-1.log b/datasets/attack_techniques/T1187/petitpotam/windows-xml-1.log
diff --git a/datasets/attack_techniques/T1187/petitpotam/windows-xml.log b/datasets/attack_techniques/T1187/petitpotam/windows-xml.log
diff --git a/datasets/attack_techniques/T1490/known_services_killed_by_ransomware/windows-xml.log b/datasets/attack_techniques/T1490/known_services_killed_by_ransomware/windows-xml.log
diff --git a/...ets/attack_techniques/T1537/high_frequency_copy_of_files_in_network_share/windows-xml.log b/...ets/attack_techniques/T1537/high_frequency_copy_of_files_in_network_share/windows-xml.log
diff --git a/datasets/attack_techniques/T1543.003/windows_krbrelayup_service_creation/windows-xml.log b/datasets/attack_techniques/T1543.003/windows_krbrelayup_service_creation/windows-xml.log
diff --git a/datasets/attack_techniques/T1547.012/print_reg/windows-xml.log b/datasets/attack_techniques/T1547.012/print_reg/windows-xml.log
diff --git a/datasets/attack_techniques/T1550/kerberos_tgt_request_using_rc4_encryption/windows-xml.log b/datasets/attack_techniques/T1550/kerberos_tgt_request_using_rc4_encryption/windows-xml.log
diff --git a/...s/attack_techniques/T1555/non_chrome_process_accessing_chrome_default_dir/windows-xml.log b/...s/attack_techniques/T1555/non_chrome_process_accessing_chrome_default_dir/windows-xml.log
diff --git a/...techniques/T1558.001/kerberos_service_ticket_request_using_rc4_encryption/windows-xml.log b/...techniques/T1558.001/kerberos_service_ticket_request_using_rc4_encryption/windows-xml.log
diff --git a/...attack_techniques/T1558.003/kerberoasting_spn_request_with_rc4_encryption/windows-xml.log b/...attack_techniques/T1558.003/kerberoasting_spn_request_with_rc4_encryption/windows-xml.log
diff --git a/...techniques/T1558.003/unusual_number_of_kerberos_service_tickets_requested/windows-xml.log b/...techniques/T1558.003/unusual_number_of_kerberos_service_tickets_requested/windows-xml.log
diff --git a/...ack_techniques/T1558/windows_computer_account_created_by_computer_account/windows-xml.log b/...ack_techniques/T1558/windows_computer_account_created_by_computer_account/windows-xml.log
diff --git a/...tack_techniques/T1558/windows_computer_account_requesting_kerberos_ticket/windows-xml.log b/...tack_techniques/T1558/windows_computer_account_requesting_kerberos_ticket/windows-xml.log
diff --git a/datasets/attack_techniques/T1558/windows_computer_account_with_spn/windows-xml.log b/datasets/attack_techniques/T1558/windows_computer_account_with_spn/windows-xml.log
diff --git a/datasets/attack_techniques/T1558/windows_kerberos_local_successful_logon/windows-xml.log b/datasets/attack_techniques/T1558/windows_kerberos_local_successful_logon/windows-xml.log
diff --git a/...ttack_techniques/T1562.001/powershell_windows_defender_exclusion_commands/windows-xml.log b/...ttack_techniques/T1562.001/powershell_windows_defender_exclusion_commands/windows-xml.log
diff --git a/...ets/attack_techniques/T1562.001/windows_excessive_disabled_services_event/windows-xml.log b/...ets/attack_techniques/T1562.001/windows_excessive_disabled_services_event/windows-xml.log
diff --git a/datasets/attack_techniques/T1563.002/windows_rdp_connection_successful/windows-xml.log b/datasets/attack_techniques/T1563.002/windows_rdp_connection_successful/windows-xml.log
diff --git a/...ts/attack_techniques/T1569.002/malicious_powershell_executed_as_a_service/windows-xml.log b/...ts/attack_techniques/T1569.002/malicious_powershell_executed_as_a_service/windows-xml.log
diff --git a/...techniques/T1569.002/windows_service_created_with_suspicious_service_path/windows-xml.log b/...techniques/T1569.002/windows_service_created_with_suspicious_service_path/windows-xml.log
diff --git a/datasets/attack_techniques/T1589.002/kerberos_user_enumeration/windows-xml.log b/datasets/attack_techniques/T1589.002/kerberos_user_enumeration/windows-xml.log