XML group 1 conversion

splunk · Feb 12, 2024 · 86127f4 · 86127f4
1 parent 687e296
commit 86127f4
Show file tree

Hide file tree

Showing 7 changed files with 19 additions and 0 deletions.
diff --git a/datasets/attack_techniques/T1069.002/AD_discovery/windows-xml.log b/datasets/attack_techniques/T1069.002/AD_discovery/windows-xml.log
diff --git a/datasets/attack_techniques/T1078.002/account_lockout/account_lockout.yml b/datasets/attack_techniques/T1078.002/account_lockout/account_lockout.yml
@@ -8,6 +8,7 @@ dataset:
 - https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1078.002/account_lockout/windows-security.log
 - https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1078.002/account_lockout/windows-sysmon.log
 - https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1078.002/account_lockout/windows-system.log
+- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1078.002/account_lockout/windows-xml.log
 sourcetypes:
 - XmlWinEventLog:Microsoft-Windows-Sysmon/Operational
 - WinEventLog:Microsoft-Windows-PowerShell/Operational

diff --git a/datasets/attack_techniques/T1078.002/account_lockout/windows-xml.log b/datasets/attack_techniques/T1078.002/account_lockout/windows-xml.log
diff --git a/datasets/attack_techniques/T1136.001/atomic_red_team/windows-xml.log b/datasets/attack_techniques/T1136.001/atomic_red_team/windows-xml.log
diff --git a/datasets/attack_techniques/T1562.001/win_app_defender_disabling/windows-xml.log b/datasets/attack_techniques/T1562.001/win_app_defender_disabling/windows-xml.log
diff --git a/datasets/malware/trickbot/exe_smbshare/windows-xml.log b/datasets/malware/trickbot/exe_smbshare/windows-xml.log
diff --git a/datasets/malware/vilsel/windows-xml.log b/datasets/malware/vilsel/windows-xml.log