Dataset · Text classification
Sev-behavioral-research-v1
by Rr macmacmacmac/Sev-behavioral-research-v1
The v0.3.0 response-policy checkpoint improves authored policy decisions from 127/175 to 147/175 across 35 held-out source programs. At its calibration-selected alert threshold, it flags 14/140 permitted decisions, a 10% false-alert rate on this panel.
Rows133,513
Configurations6
Size9.7 GB
Licenseother
AccessPublicly accessible
Monthly Downloads33
Dataset Card
The v0.3.0 response-policy checkpoint improves authored policy decisions from 127/175 to 147/175 across 35 held-out source programs. At its calibration-selected alert threshold, it flags 14/140 permitted decisions, a 10% false-alert rate on this panel. 26/28 registered checks pass. The DNS diagnostic remains 21/32, with one repaired answer and one newly incorrect answer. These are bounded research results, not field validation or proof of human-versus-agent classification. The current 40-entry collection inventory and catalog preserve all previous entries. The new response-policy configuration contains 139 training, 28 calibration, and 35 development programs with explicit authored…
Excerpt from the card by Rr, licensed other.
Structure
default 4,081 rows
| Split | Rows | Size |
|---|---|---|
| train | 2,334 | 4.3 MB |
| calibration | 482 | 890.1 KB |
| development | 1,265 | 2.4 MB |
stateJsonquestionsJson_metaJson
dns-incident-v1 8 rows
| Split | Rows | Size |
|---|---|---|
| development | 8 | 24.6 KB |
statestringquestionsvalue_metaJson
response-policy-v2 202 rows
| Split | Rows | Size |
|---|---|---|
| train | 139 | 446.9 KB |
| calibration | 28 | 173.5 KB |
| development | 35 | 217.3 KB |
statestringquestionsJson_metavalue
swarmtraces-manual-v1 40 rows
| Split | Rows | Size |
|---|---|---|
| development | 40 | 118.5 KB |
statestringquestionsJson_metavalue
swarmtraces-observations 128,454 rows
| Split | Rows | Size |
|---|---|---|
| corpus | 128,454 | 105.8 MB |
episode_idstringview_idstringeventslist
swarmtraces-static-v1 728 rows
| Split | Rows | Size |
|---|---|---|
| train | 446 | 997.4 KB |
| calibration | 106 | 236.3 KB |
| development | 176 | 389.6 KB |
statestringquestionsJson_metavalue
Details
- Repository
- macmacmacmac/Sev-behavioral-research-v1
- Publisher
- Rr
- Task category
- Text classification
- Tags
- cybersecurity, security-evidence, agent-activity
- Size category
- Not stated by the source
- Languages
- en
- Revision
- f9f593c3acc18a7a9429f76c872efc2ec7887cc1
- Last updated
- 2026-09-28
Files
3,006 files, 9.7 GB in total.
Data490 files · 4.3 GB
Documentation60 files · 239.5 KB
Other2450 files · 5.4 GB
Every file (first 3,000)
| File | Type | Size | SHA-256 |
|---|---|---|---|
| behavioral-research-v1/calibration.jsonl | Data | 923.2 KB | — |
| behavioral-research-v1/development.jsonl | Data | 2.5 MB | — |
| behavioral-research-v1/input-manifest.json | Data | 3.8 KB | — |
| behavioral-research-v1/manifest.json | Data | 4.8 KB | — |
| behavioral-research-v1/test.jsonl | Data | — | |
| behavioral-research-v1/train.jsonl | Data | 4.4 MB | — |
| collection/v2/datasets_index.json | Data | 1.6 MB | 22d130fb421f |
| collection/v2/experiments/response-policy-v2/catalog/catalog-overlay.json | Data | 19.2 KB | 785069c9a19b |
| collection/v2/experiments/response-policy-v2/catalog/datasets_index.json | Data | 1.7 MB | 33b8c40d6b6a |
| collection/v2/experiments/response-policy-v2/curriculum-v2/manifest.json | Data | 5.3 KB | 3b9a80dfd212 |
| collection/v2/experiments/response-policy-v2/curriculum-v2/publication.json | Data | 1.3 KB | 96c0fb11ea5f |
| collection/v2/experiments/response-policy-v2/curriculum-v2/source-manifests/legacy.json | Data | 5.0 KB | 61e3c1898b8a |
| collection/v2/experiments/response-policy-v2/curriculum-v2/source-manifests/response_policy.json | Data | 4.2 KB | 2d14cc16e7df |
| collection/v2/experiments/response-policy-v2/dns-incident-v1/calibration.jsonl | Data | — | |
| collection/v2/experiments/response-policy-v2/dns-incident-v1/development.jsonl | Data | 28.4 KB | dbf2deaaaaf7 |
| collection/v2/experiments/response-policy-v2/dns-incident-v1/manifest.json | Data | 4.5 KB | 54ef48fe2c0a |
| collection/v2/experiments/response-policy-v2/dns-incident-v1/publication.json | Data | 1.0 KB | c9845fd3f71d |
| collection/v2/experiments/response-policy-v2/dns-incident-v1/review.json | Data | 1.5 KB | b649faa574ed |
| collection/v2/experiments/response-policy-v2/dns-incident-v1/train.jsonl | Data | — | |
| collection/v2/experiments/response-policy-v2/policy-v2/calibration.jsonl | Data | 192.0 KB | 0daa3202b621 |
| collection/v2/experiments/response-policy-v2/policy-v2/development.jsonl | Data | 240.3 KB | 2e5c49c5eabf |
| collection/v2/experiments/response-policy-v2/policy-v2/manifest.json | Data | 4.2 KB | 2d14cc16e7df |
| collection/v2/experiments/response-policy-v2/policy-v2/publication.json | Data | 946 B | 03d35e1fcfc0 |
| collection/v2/experiments/response-policy-v2/policy-v2/train.jsonl | Data | 529.6 KB | f3ad7746b452 |
| collection/v2/experiments/response-policy-v2/transfer-v2/manifest.json | Data | 2.7 KB | adde94227c95 |
| collection/v2/experiments/response-policy-v2/transfer-v2/publication.json | Data | 1.3 KB | b32181a26ed9 |
| collection/v2/experiments/response-policy-v2/transfer-v2/source-manifests/dns-incident-v1.json | Data | 4.5 KB | 54ef48fe2c0a |
| collection/v2/experiments/response-policy-v2/transfer-v2/source-manifests/swarmtraces-transfer-v1.json | Data | 2.3 KB | 1caf22558509 |
| collection/v2/experiments/swarmtraces-v1/catalog/catalog-overlay.json | Data | 20.2 KB | 5c4f754a241f |
| collection/v2/experiments/swarmtraces-v1/catalog/datasets_index.json | Data | 1.6 MB | 99464a7a69de |
| collection/v2/experiments/swarmtraces-v1/curriculum-v1/manifest.json | Data | 5.0 KB | 61e3c1898b8a |
| collection/v2/experiments/swarmtraces-v1/curriculum-v1/publication.json | Data | 1.1 KB | 0b02f21fb743 |
| collection/v2/experiments/swarmtraces-v1/curriculum-v1/source-manifests/legacy.json | Data | 5.1 KB | 5ae5dbfd48e9 |
| collection/v2/experiments/swarmtraces-v1/curriculum-v1/source-manifests/swarm.json | Data | 3.5 KB | 1f304228dbbc |
| collection/v2/experiments/swarmtraces-v1/manual-v1/annotations.json | Data | 48.0 KB | e5f341272215 |
| collection/v2/experiments/swarmtraces-v1/manual-v1/calibration.jsonl | Data | — | |
| collection/v2/experiments/swarmtraces-v1/manual-v1/development.jsonl | Data | 126.2 KB | d0e5832305f1 |
| collection/v2/experiments/swarmtraces-v1/manual-v1/manifest.json | Data | 1.8 KB | 6c1f892e39bd |
| collection/v2/experiments/swarmtraces-v1/manual-v1/protection.json | Data | 61.2 KB | abd1e0ebf71e |
| collection/v2/experiments/swarmtraces-v1/manual-v1/publication.json | Data | 1.1 KB | 0255e5c832fa |
| collection/v2/experiments/swarmtraces-v1/manual-v1/train.jsonl | Data | — | |
| collection/v2/experiments/swarmtraces-v1/manual-v1/validation.json | Data | 895 B | b4302a4fa054 |
| collection/v2/experiments/swarmtraces-v1/static-v1/calibration.jsonl | Data | 277.0 KB | 7754bac053cd |
| collection/v2/experiments/swarmtraces-v1/static-v1/development.jsonl | Data | 457.2 KB | 1847a598a428 |
| collection/v2/experiments/swarmtraces-v1/static-v1/manifest.json | Data | 3.5 KB | 1f304228dbbc |
| collection/v2/experiments/swarmtraces-v1/static-v1/publication.json | Data | 1.0 KB | b2a12c3e8613 |
| collection/v2/experiments/swarmtraces-v1/static-v1/train.jsonl | Data | 1.2 MB | c09de8a213c5 |
| collection/v2/experiments/swarmtraces-v1/transfer-v1/manifest.json | Data | 2.3 KB | 1caf22558509 |
| collection/v2/experiments/swarmtraces-v1/transfer-v1/publication.json | Data | 1.2 KB | fe313742865e |
| collection/v2/experiments/swarmtraces-v1/transfer-v1/source-manifests/security-transfer-v1.json | Data | 2.1 KB | 6b2d546ac337 |
| collection/v2/experiments/swarmtraces-v1/transfer-v1/source-manifests/swarmtraces-manual-v1.json | Data | 1.8 KB | 6c1f892e39bd |
| collection/v2/license-evidence/behavioral_v1-0.txt | Data | 1.6 KB | fa28696b03d1 |
| collection/v2/license-evidence/bpi2019-0.json | Data | 8.3 KB | 0e67f83ac721 |
| collection/v2/license-evidence/contractnli-0.txt | Data | 18.7 KB | 9e5f1b3c610b |
| collection/v2/license-evidence/ctu_sme_11-0.txt | Data | 10.2 KB | 4158abc0f917 |
| collection/v2/license-evidence/defects4j-0.txt | Data | 1.3 KB | 4a1f097e4ad6 |
| collection/v2/license-evidence/defects4j-1.txt | Data | 11.4 KB | cfc7749b96f6 |
| collection/v2/license-evidence/excytin_bench_source_v1-1.txt | Data | 2.4 KB | 4531a67d4432 |
| collection/v2/license-evidence/excytin_bench_source_v1-2.txt | Data | 1.1 KB | c2cfccb812fe |
| collection/v2/license-evidence/microsoft_guide_source_v2-1.txt | Data | 2.4 KB | 4531a67d4432 |
| collection/v2/license-evidence/mind2web_sample_v1-0.txt | Data | 4.3 KB | d2da20abbf17 |
| collection/v2/license-evidence/mordor_security_datasets-0.txt | Data | 1.1 KB | fce88163b60d |
| collection/v2/license-evidence/sev_excytin_native_v1-0.txt | Data | 2.4 KB | 4531a67d4432 |
| collection/v2/license-evidence/sev_guide_detector_v1-0.txt | Data | 2.4 KB | 4531a67d4432 |
| collection/v2/license-evidence/sev_guide_v1-0.txt | Data | 2.4 KB | 4531a67d4432 |
| collection/v2/license-evidence/sev_sysmon_native_v2-0.txt | Data | 1.1 KB | fce88163b60d |
| collection/v2/license-evidence/splunk_attack_data-0.txt | Data | 11.3 KB | 8505946b2464 |
| collection/v2/license-evidence/splunk_botsv1-0.txt | Data | 6.6 KB | 36ffd9dc085d |
| collection/v2/license-evidence/splunk_botsv2-0.txt | Data | 6.6 KB | 36ffd9dc085d |
| collection/v2/license-evidence/splunk_botsv3-0.txt | Data | 6.6 KB | 36ffd9dc085d |
| collection/v2/license-evidence/swarmtraces_agent_activity-0.json | Data | 610 B | 9342101baf68 |
| collection/v2/license-evidence/synergy-1.json | Data | 7.6 KB | 024e55cfc398 |
| collection/v2/license-evidence/urlquery_agent_activity-0.json | Data | 1.6 KB | ccbd07ab5b7e |
| collection/v2/license-evidence/webchain_timing_audit_v1-0.txt | Data | 6.8 KB | 730371b6a309 |
| collection/v2/license-evidence/webchain_timing_audit_v1-1.txt | Data | 506 B | 360840e44a07 |
| collection/v2/license-evidence/wonderbread_timing_audit_v1-0.txt | Data | 11.4 KB | 9f2af896cf8d |
| collection/v2/sources/behavioral_v1/audit.json | Data | 1.2 KB | — |
| collection/v2/sources/behavioral_v1/episodes.jsonl | Data | 545.8 MB | d8f28c4e07d8 |
| collection/v2/sources/behavioral_v1/labels.jsonl | Data | 6.0 MB | — |
| collection/v2/sources/behavioral_v1/manifest.json | Data | 3.7 KB | — |
| collection/v2/sources/behavioral_v1/observations.jsonl | Data | 189.7 MB | 77870a3ef23a |
| collection/v2/sources/bpi2019/acquisition.json | Data | 1.6 KB | 3a923a4f8b67 |
| collection/v2/sources/bpi2019/preparation-output.json | Data | 22.2 KB | c20924aababf |
| collection/v2/sources/bpi2019/prepared-v1/annotation-template.jsonl | Data | 16.5 KB | 68b33b0ea06d |
| collection/v2/sources/bpi2019/prepared-v1/cases.jsonl | Data | 922.5 KB | 1b95858ccd74 |
| collection/v2/sources/bpi2019/prepared-v1/evidence.jsonl | Data | 1.1 MB | be973fd1a7c0 |
| collection/v2/sources/bpi2019/prepared-v1/manifest.json | Data | 762 B | 3d97643cba59 |
| collection/v2/sources/bpi2019/prepared-v1/selection.json | Data | 15.1 KB | 5af40bb54b22 |
| collection/v2/sources/bpi2019/raw/datacite-metadata.json | Data | 19.1 KB | 566cbede189b |
| collection/v2/sources/bpi2019/raw/download-prefix.json | Data | 350 B | 8fb858006fee |
| collection/v2/sources/bpi2019/raw/publisher-metadata.json | Data | 8.3 KB | 0e67f83ac721 |
| collection/v2/sources/bpi2019/summary.json | Data | 22.2 KB | 0b662954538b |
| collection/v2/sources/contractnli/audit.json | Data | 602 B | eed71e3125c2 |
| collection/v2/sources/contractnli/full-question-smoke/prepared/diagnostic-examples.json | Data | 3.2 KB | 80ac21914fe5 |
| collection/v2/sources/contractnli/full-question-smoke/prepared/documents.json | Data | 2.3 MB | ea7725aae2b6 |
| collection/v2/sources/contractnli/full-question-smoke/prepared/pilot-model-input.json | Data | 843.1 KB | 1ef309f3a778 |
| collection/v2/sources/contractnli/full-question-smoke/prepared/pilot-rankbench-evaluation.json | Data | 938.1 KB | 512116a7aea7 |
| collection/v2/sources/contractnli/full-question-smoke/prepared/questions.json | Data | 237.2 KB | 81e4c6c860e5 |
| collection/v2/sources/contractnli/full-question-smoke/prepared/selection-audit.json | Data | 2.1 MB | d238a05d5283 |
| collection/v2/sources/contractnli/full-question-smoke/prepared/source-dev.json | Data | 1.2 MB | 310af7d661d2 |
| collection/v2/sources/contractnli/full-question-smoke/prepared/truth.json | Data | 158.1 KB | 7c80e5fc855d |
| collection/v2/sources/contractnli/full-question-smoke/summary.json | Data | 1.7 KB | 666ba9b66278 |
| collection/v2/sources/contractnli/initial-smoke/prepared/documents.json | Data | 2.3 MB | ea7725aae2b6 |
| collection/v2/sources/contractnli/initial-smoke/prepared/pilot-model-input.json | Data | 99.1 KB | 6c086c9dea35 |
| collection/v2/sources/contractnli/initial-smoke/prepared/pilot-rankbench-evaluation.json | Data | 110.3 KB | cb24ad1ad39e |
| collection/v2/sources/contractnli/initial-smoke/prepared/questions.json | Data | 237.2 KB | 81e4c6c860e5 |
| collection/v2/sources/contractnli/initial-smoke/prepared/selection-audit.json | Data | 2.1 MB | d238a05d5283 |
| collection/v2/sources/contractnli/initial-smoke/prepared/source-dev.json | Data | 1.2 MB | 310af7d661d2 |
| collection/v2/sources/contractnli/initial-smoke/prepared/truth.json | Data | 158.1 KB | 7c80e5fc855d |
| collection/v2/sources/contractnli/initial-smoke/summary.json | Data | 1.8 KB | eb8d100ade16 |
| collection/v2/sources/contractnli/prepared/documents.json | Data | 2.3 MB | ea7725aae2b6 |
| collection/v2/sources/contractnli/prepared/pilot-model-input.json | Data | 843.1 KB | 1ef309f3a778 |
| collection/v2/sources/contractnli/prepared/pilot-rankbench-evaluation.json | Data | 583.8 KB | 0eb73b98a5a2 |
| collection/v2/sources/contractnli/prepared/questions.json | Data | 237.2 KB | 81e4c6c860e5 |
| collection/v2/sources/contractnli/prepared/selection-audit.json | Data | 2.1 MB | d238a05d5283 |
| collection/v2/sources/contractnli/prepared/source-dev.json | Data | 1.2 MB | 310af7d661d2 |
| collection/v2/sources/contractnli/prepared/truth.json | Data | 158.1 KB | 7c80e5fc855d |
| collection/v2/sources/contractnli/raw/contract-nli.zip | Data | 65.4 MB | e03fc77bbf8b |
| collection/v2/sources/contractnli/raw/download.json | Data | 83.2 KB | 1f7ca286cc33 |
| collection/v2/sources/contractnli/summary.json | Data | 2.0 KB | 381ce92ca017 |
| collection/v2/sources/ctu_sme_11/download.json | Data | 302 B | — |
| collection/v2/sources/defects4j/evaluation/active-bugs.csv | Data | 8.7 KB | cb68d0b470c7 |
| collection/v2/sources/defects4j/evaluation/bug.json | Data | 683 B | 9606a8dc4a3f |
| collection/v2/sources/defects4j/evaluation/incomplete-utf8-export-attempt/case-001.jsonl | Data | 2.5 MB | cdd7e00c6511 |
| collection/v2/sources/defects4j/evaluation/patch-verification.json | Data | 232 B | 845a8903ea42 |
| collection/v2/sources/defects4j/evaluation/relevant-tests.txt | Data | 191 B | 307b84e947c4 |
| collection/v2/sources/defects4j/evidence/case-001.jsonl | Data | 5.7 MB | def36c30e136 |
| collection/v2/sources/defects4j/evidence/investigation.json | Data | 4.2 KB | 1c1ece6313d0 |
| collection/v2/sources/defects4j/provenance/buggy-source-tree.json | Data | 92.8 KB | a3d837d13ee7 |
| collection/v2/sources/defects4j/provenance/downloads.json | Data | 4.0 KB | f524e04865d2 |
| collection/v2/sources/defects4j/provenance/source-manifest.json | Data | 54.0 KB | 2c975ffcce25 |
| collection/v2/sources/defects4j/raw/buggy-source.tar.gz | Data | 681.0 KB | f97c316795a6 |
| collection/v2/sources/defects4j/raw/case-001/failure-trace.txt | Data | 3.6 KB | 81aec28487b7 |
| collection/v2/sources/defects4j/raw/case-001/project/NOTICE.txt | Data | 301 B | 3b1830189d4d |
| collection/v2/sources/defects4j/summary.json | Data | 2.1 KB | 842ad30e0b2c |
| collection/v2/sources/evtx_attack_samples/.vscode/settings.json | Data | 44 B | — |
| collection/v2/sources/evtx_attack_samples/Command and Control/web_attack_and_isp_webshell_localhost_access_log.txt | Data | 257.7 KB | 1cf90cc5570d |
| collection/v2/sources/evtx_attack_samples/Other/netlogon_log_CVE-2020-1472_ZeroLogon.txt | Data | 4.1 MB | a7dbf6192a99 |
| collection/v2/sources/evtx_attack_samples/evtx_data.csv | Data | 4.3 MB | 9220b0725221 |
| collection/v2/sources/excytin_bench_source_v1/CDLA-Permissive-2.0.txt | Data | 2.4 KB | 4531a67d4432 |
| collection/v2/sources/excytin_bench_source_v1/data.zip | Data | 280.4 MB | 6b2a2247f5b2 |
| collection/v2/sources/excytin_bench_source_v1/excytin-acquisition.json | Data | 1.4 KB | 943460b32ddb |
| collection/v2/sources/excytin_bench_source_v1/questions/train/incident_134_qa_incident_o1-ga_c42.json | Data | 26.1 KB | fb25bc9fca4a |
| collection/v2/sources/excytin_bench_source_v1/questions/train/incident_166_qa_incident_o1-ga_c42.json | Data | 43.4 KB | 57a4491e11e4 |
| collection/v2/sources/excytin_bench_source_v1/questions/train/incident_322_qa_incident_o1-ga_c42.json | Data | 30.8 KB | af9d019b60fc |
| collection/v2/sources/excytin_bench_source_v1/questions/train/incident_34_qa_incident_o1-ga_c42.json | Data | 45.4 KB | 658133de6e29 |
| collection/v2/sources/excytin_bench_source_v1/questions/train/incident_38_qa_incident_o1-ga_c42.json | Data | 5.5 KB | 32a38ed62884 |
| collection/v2/sources/excytin_bench_source_v1/questions/train/incident_39_qa_incident_o1-ga_c42.json | Data | 142.1 KB | 51898e3bff27 |
| collection/v2/sources/excytin_bench_source_v1/questions/train/incident_55_qa_incident_o1-ga_c42.json | Data | 154.9 KB | d3d22be38c22 |
| collection/v2/sources/excytin_bench_source_v1/questions/train/incident_5_qa_incident_o1-ga_c42.json | Data | 144.5 KB | 9418a0322a6d |
| collection/v2/sources/microsoft_guide_source_v2/CDLA-Permissive-2.0.txt | Data | 2.4 KB | 4531a67d4432 |
| collection/v2/sources/microsoft_guide_source_v2/GUIDE_Train.csv | Data | 2.4 GB | 3d6c286e1353 |
| collection/v2/sources/microsoft_guide_source_v2/guide-full-download.json | Data | 362 B | de2dd8670685 |
| collection/v2/sources/microsoft_guide_source_v2/guide-metadata.json | Data | 24.4 KB | eb0723c9891c |
| collection/v2/sources/mind2web_sample_v1/manifest.json | Data | 1.3 KB | c23063cc36d6 |
| collection/v2/sources/mind2web_sample_v1/source/data/train/train_10.json | Data | 28.4 MB | 182542d7947b |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/aws/collection/ec2_proxy_s3_exfiltration.zip | Data | 14.7 KB | 83cc349afa56 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/aws/discovery/aws_s3_honeybucketlogs.zip | Data | 23.3 KB | ad36cc22814b |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/linux/defense_evasion/host/sh_binary_padding_dd.zip | Data | 680 B | dbba0766a0ea |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/linux/discovery/host/sh_arp_cache.zip | Data | 714 B | 6527c420ed81 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/collection/host/msf_record_mic.zip | Data | 468.8 KB | 5ea8ac17aceb |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/cmd_dumping_ntds_dit_file_ntdsutil.zip | Data | 472.0 KB | 4633882ab1e9 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/cmd_dumping_ntds_dit_file_volume_shadow_copy.zip | Data | 701.9 KB | aed847c1571e |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/cmd_lsass_memory_dumpert_syscalls.zip | Data | 12.9 KB | a28dbf708685 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/cmd_psexec_lsa_secrets_dump.zip | Data | 38.1 KB | c52e6145fefe |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/cmd_sam_copy_esentutl.zip | Data | 40.7 KB | f7a71135778a |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/covenant_dcsync_dcerpc_drsuapi_DsGetNCChanges.zip | Data | 76.9 KB | ccbb0e91c03f |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/empire_dcsync_dcerpc_drsuapi_DsGetNCChanges.zip | Data | 655.1 KB | fe1fcc96c0ff |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/empire_mimikatz_backupkeys_dcerpc_smb_lsarpc.zip | Data | 618.3 KB | 63ee26d89071 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/empire_mimikatz_extract_keys.zip | Data | 1.0 MB | 5511f426c371 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/empire_mimikatz_logonpasswords.zip | Data | 716.7 KB | bb4c057b62d7 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/empire_mimikatz_lsadump_inject_protected_mode.zip | Data | 134.7 KB | d15780ac0bac |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/empire_mimikatz_lsadump_patch.zip | Data | 899.1 KB | 552d5c8a3a41 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/empire_mimikatz_opth.tar.gz | Data | 1.2 MB | 43c827cb8de8 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/empire_mimikatz_sam_access.zip | Data | 777.9 KB | 1ed87bd1286f |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/empire_ninjacopy_dumping_ntds_dit_file.zip | Data | 950.1 KB | 89bf86818a94 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/empire_over_pth_patch_lsass.zip | Data | 829.3 KB | daee42bbd9f7 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/empire_powerdump_sam_access.zip | Data | 200.4 KB | 44fdafcbd739 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/empire_shell_reg_dump_sam.zip | Data | 138.4 KB | 5a8ee19860f3 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/empire_shell_rubeus_asktgt_createnetonly.zip | Data | 432.7 KB | 3ed7d6d93cca |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/empire_shell_rubeus_asktgt_ptt.zip | Data | 224.3 KB | a2ad97df3783 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/psh_input_capture_promptforcreds.zip | Data | 15.6 KB | 768e3c32e39f |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/psh_lsass_memory_dump_comsvcs.zip | Data | 18.0 KB | 0af9e920220d |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/psh_windows_vault_web_credentials.zip | Data | 10.5 KB | 09a374a4d434 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/host/rdp_interactive_taskmanager_lsass_dump.zip | Data | 402.0 KB | a7761e64c891 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/network/covenant_dcsync_dcerpc_drsuapi_DsGetNCChanges.zip | Data | 1.4 MB | 852104835d04 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/network/empire_dcsync_dcerpc_drsuapi_DsGetNCChanges.zip | Data | 3.2 MB | a13a72c9184d |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/network/empire_mimikatz_backupkeys_dcerpc_smb_lsarpc.zip | Data | 3.2 MB | 4890b8ed447c |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/network/empire_ninjacopy_dumping_ntds_dit_file_pcap.zip | Data | 505.5 KB | 323c0c0edb5f |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/network/empire_shell_rubeus_asktgt_createnetonly.zip | Data | 12.1 KB | b21044be64ac |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/network/empire_shell_rubeus_asktgt_ptt.zip | Data | 18.5 KB | c7a915ed5d16 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/credential_access/network/purplesharp_2020-11-02102419.json | Data | — | |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/auditpol_system_user_auditpolicy_modification.zip | Data | 611.3 KB | 5eb1776e7e9f |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/cmd_bitsadmin_download_psh_script.zip | Data | 51.6 KB | 8fb7bc9f3d82 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/cmd_disable_eventlog_service_startuptype_modification_via_registry.zip | Data | 367.0 KB | 4312946d5bb0 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/cmd_mshta_javascript_getobject_sct.zip | Data | 125.9 KB | 976a705690dc |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/cmd_mshta_vbscript_execute_psh.zip | Data | 88.5 KB | f5f700bc986b |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/cmd_netsh_fw_mod_open_ports.zip | Data | 97.7 KB | 3d887b38c6a9 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/cmd_process_herpaderping_mimiexplorer.zip | Data | 34.7 KB | 674a88eac2ce |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/cmd_process_herpaderping_snippingtool.zip | Data | 36.2 KB | c3132a3d8f22 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/cmd_psh_stop_netprofm_eventlog_after_reboot.zip | Data | 726.1 KB | 21530be38786 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/cmd_psh_stop_netprofm_eventlog_before_reboot.zip | Data | 391.2 KB | 9fd41f01ef84 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/cmd_stop_event_logging_controlset001_minint_key.zip | Data | 872.7 KB | f88a69b334b0 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/cmd_stop_event_logging_controlset_minint_key.zip | Data | 320.9 KB | 564715635a46 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/cmd_wevtutil_modify_security_eventlog_path.zip | Data | 1.4 MB | 2ea34cf2d352 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/covenant_installutil.zip | Data | 111.1 KB | 9be5698bd46e |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/covenant_lolbin_wuauclt_createremotethread.zip | Data | 137.1 KB | 56b6695152f4 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/empire_dllinjection_LoadLibrary_CreateRemoteThread.zip | Data | 1.1 MB | 98071a478f57 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/empire_enable_rdp.tar.gz | Data | 520.5 KB | b10345f3e97c |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/empire_launcher_sct_regsvr32.zip | Data | 310.1 KB | abeb5c52c752 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/empire_monologue_netntlm_downgrade.zip | Data | 268.2 KB | 27d88aaccf5d |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/empire_powerview_ldap_ntsecuritydescriptor.zip | Data | 1.0 MB | 6db5eac7fdab |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/empire_psinject_PEinjection.zip | Data | 827.9 KB | ad6297ce8cfb |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/empire_scm_dll_hijack_ikeext.tar.gz | Data | 2.2 MB | 484f215a3382 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/empire_wdigest_downgrade.tar.gz | Data | 526.5 KB | 7135251d3073 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/empire_wmic_add_user_backdoor.zip | Data | 1.2 MB | 4b18e693ed39 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/psh_cmstp_execution_bypassuac.zip | Data | 81.3 KB | a653c698e8f7 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/psh_control_panel_execution.zip | Data | 151.0 KB | d0c6ab023cb7 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/psh_disable_eventlog_service_startuptype_modification.zip | Data | 380.6 KB | aaf99c001735 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/psh_hh_local_html_payload.zip | Data | 136.0 KB | c9967cde50a7 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/psh_mavinject_dll_notepad.zip | Data | 53.5 KB | 262680222316 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/psh_metasploit_stop_netprofm_eventlog_after_reboot.zip | Data | 632.7 KB | 5cc62675b3aa |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/psh_metasploit_stop_netprofm_eventlog_before_reboot.zip | Data | 1.2 MB | 3ce990f0e229 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/psh_mshta_html_application_execution.zip | Data | 155.0 KB | f734cd8d2043 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/psh_register_cimprovider_execute_dll.zip | Data | 129.8 KB | a92085e34164 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/psh_stop_event_logging_controlset001_minint_key.zip | Data | 460.1 KB | f7673e1dcf64 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/psh_stop_event_logging_controlset_minint_key.zip | Data | 358.0 KB | 88e1a3618f28 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/purplesharp_pe_injection_createremotethread.zip | Data | 82.2 KB | d1cfff740444 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/reg_cmd_process_commandline_logging_disabled.zip | Data | 357.1 KB | 59ba811e1d26 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/reg_disable_eventlog_service_startuptype_modification_via_registry.zip | Data | 235.7 KB | d79d5a13fbb1 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/reg_meterpreter_process_commandline_logging_disabled.zip | Data | 483.2 KB | 592e5214cf4b |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/reg_stop_event_logging_controlset001_minint_key.zip | Data | 275.5 KB | 6d3d2f07cc04 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/reg_stop_event_logging_controlset_minint_key.zip | Data | 326.0 KB | e741989173a4 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/host/wmic_remote_xsl_jscript.zip | Data | 132.5 KB | f57662210591 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/defense_evasion/network/empire_powerview_ldap_ntsecuritydescriptor.zip | Data | 957.7 KB | 29a01ff586fb |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/discovery/host/cmd_discover_iexplorer_version_registry.zip | Data | 9.2 KB | 3215b22ff18e |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/discovery/host/cmd_seatbelt_group_user.zip | Data | 48.5 KB | d885d5c33164 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/discovery/host/covenant_getdomaingroup_ldap_searchrequest_domain_admins.zip | Data | 34.8 KB | af11d4d2140d |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/discovery/host/empire_find_localadmin_smb_svcctl_OpenSCManager.zip | Data | 719.3 KB | b721c16e8463 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/discovery/host/empire_getsession_dcerpc_smb_srvsvc_NetSessEnum.zip | Data | 468.1 KB | 43e39d48cbdd |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/discovery/host/empire_shell_net_local_users.zip | Data | 222.7 KB | a2cf8016ad2a |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/discovery/host/empire_shell_net_localgroup_administrators.zip | Data | 108.0 KB | 7331af9e09f7 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/discovery/host/empire_shell_rpc_samr_smb_group_domain_admins_standard_user.zip | Data | 224.2 KB | aa5c2a87fc3a |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/discovery/host/empire_shell_samr_EnumDomainUsers.zip | Data | 99.6 KB | b37c022ce7aa |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/discovery/network/covenant_getdomaingroup_ldap_searchrequest_domain_admins.zip | Data | 137.6 KB | 74c2067d7f26 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/discovery/network/empire_find_localadmin_smb_svcctl_OpenSCManager.zip | Data | 502.2 KB | 42387729bd27 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/discovery/network/empire_getsession_dcerpc_smb_srvsvc_NetSessEnum.zip | Data | 507.5 KB | 6f253fa1f1f2 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/discovery/network/empire_shell_rpc_samr_smb_group_domain_admins_standard_user.zip | Data | 22.5 KB | 4c5a314a8c0c |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/discovery/network/empire_shell_samr_EnumDomainUsers.zip | Data | 19.4 KB | d341ba61d442 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/execution/host/cmd_sharpview_pcre_net.zip | Data | 28.6 KB | 314b1d08b903 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/execution/host/empire_launcher_vbs.zip | Data | 313.0 KB | 812da270cf8c |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/execution/host/psh_powershell_httplistener.zip | Data | 10.5 KB | 506ba862fd76 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/execution/host/psh_python_webserver.zip | Data | 112.6 KB | 58a62e35ee7a |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/aadinternals_export_adfsdatabaseconfig_remotely.zip | Data | 38.6 KB | de1af624eb6c |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/covenant_com_wsman_automation.zip | Data | 88.3 KB | 9b23288621db |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/covenant_copy_smb_CreateRequest.zip | Data | 25.8 KB | a43e5f20cb41 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/covenant_dcom_executeexcel4macro_allowed.zip | Data | 695.0 KB | 4dabf4be2b61 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/covenant_dcom_executeexcel4macro_blocked.zip | Data | 106.4 KB | 41ccbd5197bd |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/covenant_dcom_iertutil_dll_hijack.zip | Data | 3.4 MB | e03ad2075a74 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/covenant_dcom_registerxll.zip | Data | 369.0 KB | a18d37fe9d6d |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/covenant_psremoting_command.zip | Data | 359.6 KB | 4a2e0f9688c8 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/covenant_psremoting_grunt.zip | Data | 623.0 KB | 3a9b8dfaa1ab |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/covenant_sc_query_dcerpc_smb_svcctl.zip | Data | 62.2 KB | 3975cdac314b |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/covenant_sharpsc_create_dcerpc_smb_svcctl.zip | Data | 277.0 KB | 77487bbd1fc7 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/covenant_sharpsc_query_dcerpc_smb_svcctl.zip | Data | 49.5 KB | 0d39ef84ead0 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/covenant_sharpsc_start_dcerpc_smb_svcctl.zip | Data | 368.7 KB | a6cebf14f42f |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/covenant_sharpsc_stop_dcerpc_smb_svcctl.zip | Data | 145.7 KB | 1b2254fde357 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/covenant_sharpwmi_create_dcerpc_wmi.zip | Data | 195.2 KB | 6ff5d99660a2 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/covenant_wmi_remote_event_subscription_ActiveScriptEventConsumers.zip | Data | 351.1 KB | 6167815b2f19 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/covenant_wmi_wbemcomn_dll_hijack.zip | Data | 620.4 KB | 66d73cccd791 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/empire_dcom_shellwindows_stager.zip | Data | 2.2 MB | 9ec1bcfffc46 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/empire_msbuild_dcerpc_wmi_smb.zip | Data | 653.6 KB | edbc2fdd9e11 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/empire_psexec_dcerpc_tcp_svcctl.zip | Data | 656.2 KB | 8f40e7fc86bb |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/empire_psremoting_stager.zip | Data | 409.7 KB | 214355730c8c |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/empire_shell_dcerpc_smb_service_dll_hijack.zip | Data | 865.4 KB | 59265c906bf2 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/empire_smbexec_dcerpc_smb_svcctl.zip | Data | 753.2 KB | c0fc435c9ce0 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/empire_wmi_dcerpc_wmi_IWbemServices_ExecMethod.zip | Data | 675.4 KB | 96f1dbd9c5b0 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/empire_wmic_add_user_backdoor.zip | Data | 1.2 MB | 88502d9a8d90 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/mimikatz_CVE-2020-1472_Unauthenticated_NetrServerAuthenticate2.zip | Data | 78.8 KB | 03b8cefdd0c3 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/purplesharp_ad_playbook_I.zip | Data | 1.4 MB | 2a2d80e7b8d8 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/purplesharp_ad_playbook_I_2020-10-22042947.json | Data | 39.7 MB | d86d22f0c02a |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/schtask_create.zip | Data | 126.3 KB | 74394c64b660 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/host/schtask_modification.zip | Data | 244.1 KB | 1ad310765981 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/aadinternals_export_adfsdatabaseconfig_remotely.zip | Data | 98.9 KB | f2e763d27af7 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/covenant_copy_smb_CreateRequest.zip | Data | 39.4 KB | 5bd11ee3b5f9 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/covenant_dcom_executeexcel4macro_allowed.zip | Data | 5.0 MB | 7c7657ccdcb8 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/covenant_dcom_executeexcel4macro_blocked.zip | Data | 49.1 KB | f3e55082fdf5 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/covenant_dcom_iertutil_dll_hijack.zip | Data | 498.0 KB | 88988c0fdb8c |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/covenant_dcom_registerxll.zip | Data | 58.4 KB | a1a5f7986e76 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/covenant_psremoting_command.zip | Data | 411.0 KB | 56eae27edc44 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/covenant_sc_query_dcerpc_smb_svcctl.zip | Data | 63.6 KB | 65129315d820 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/covenant_sharpsc_create_dcerpc_smb_svcctl.zip | Data | 46.0 KB | bd83cbd85be4 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/covenant_sharpsc_query_dcerpc_smb_svcctl.zip | Data | 45.9 KB | 1e279fd41742 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/covenant_sharpsc_start_dcerpc_smb_svcctl.zip | Data | 38.4 KB | d985d806a06f |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/covenant_sharpsc_stop_dcerpc_smb_svcctl.zip | Data | 39.9 KB | 57c1c2fe6944 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/covenant_sharpwmi_create_dcerpc_wmi.zip | Data | 114.1 KB | 08b90da7ff10 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/covenant_wmi_remote_event_subscription_ActiveScriptEventConsumers.zip | Data | 194.1 KB | aef4dd1997e9 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/covenant_wmi_wbemcomn_dll_hijack.zip | Data | 878.9 KB | 859070e4533a |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/empire_dcom_shellwindows.zip | Data | 110.7 KB | 1e74c818749d |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/empire_msbuild_dcerpc_wmi_smb.zip | Data | 571.5 KB | 929bf5cc371b |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/empire_psexec_dcerpc_tcp_svcctl.zip | Data | 102.9 KB | 819a2e6e4fab |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/empire_psremoting_stager.zip | Data | 185.4 KB | c43e8ff4b61d |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/empire_shell_dcerpc_smb_service_dll_hijack.zip | Data | 1.1 MB | 1d8c2f5b3343 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/empire_smbexec_dcerpc_smb_svcctl.zip | Data | 248.6 KB | d9879be3d5e9 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/empire_wmi_dcerpc_wmi_IWbemServices_ExecMethod.zip | Data | 201.3 KB | 369363603a15 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/mimikatz_CVE-2020-1472_Unauthenticated_NetrServerAuthenticate2.zip | Data | 99.5 KB | adf586f5df40 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/purplesharp_ad_playbook_I.zip | Data | 598.3 KB | c7dd67e1f2b9 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/schtask_create.zip | Data | 1.3 MB | 18dfabd54971 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/lateral_movement/network/schtask_modification.zip | Data | 2.0 MB | 7ee8d69a6f28 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/other/aptsimulator_cobaltstrike.zip | Data | 290.2 KB | e40d119883b3 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/other/raccine_samples.zip | Data | 487 B | 6d0a37b8a332 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/other/raccine_simulation_mode.zip | Data | 489 B | f15961e6d8b6 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/persistence/host/cmd_userinitmprlogonscript_batch.zip | Data | 12.9 KB | 53a01d6976b7 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/persistence/host/covenant_persiststartup.tar.gz | Data | 106.0 KB | d91406f011e0 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/persistence/host/covenant_persistwmi.tar.gz | Data | 98.3 KB | cd8494b66d25 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/persistence/host/empire_persistence_registry_modification_run_keys_elevated_user.zip | Data | 102.4 KB | 2809354d6790 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/persistence/host/empire_persistence_registry_modification_run_keys_standard_user.zip | Data | 3.6 MB | 2965f791bcaf |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/persistence/host/empire_schtasks_creation_execution_elevated_user.zip | Data | 4.2 MB | 74662dc5c52f |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/persistence/host/empire_schtasks_creation_standard_user.zip | Data | 263.7 KB | b073a18420c9 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/persistence/host/empire_wmi_local_event_subscriptions_elevated_user.zip | Data | 6.0 MB | a507f2edd768 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/persistence/host/proxylogon_ssrf_rce_poc.zip | Data | 378.9 KB | cc6ef822788c |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/privilege_escalation/host/cmd_service_mod_fax.zip | Data | 36.0 KB | 4a40cb09c514 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/privilege_escalation/host/empire_invoke_runas.tar.gz | Data | 690.9 KB | 17a3434c2b18 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/privilege_escalation/host/empire_uac_shellapi_fodhelper.zip | Data | 712.5 KB | b8cc7aae826f |
| collection/v2/sources/mordor_security_datasets/datasets/compound/GoldenSAMLADFSMailAccess/AADAuditEvents.Zip | Data | 1.8 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/GoldenSAMLADFSMailAccess/Microsoft365DefenderEvents.Zip | Data | 3.2 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/GoldenSAMLADFSMailAccess/OfficeActivityEvents.Zip | Data | 1.0 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/GoldenSAMLADFSMailAccess/WindowsEvents.Zip | Data | 7.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/LSASS_campaign_01/metasploit_logonpasswords_lsass_memory_dump.zip | Data | 3.4 MB | 79045fcc5a86 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/LSASS_campaign_01/metasploit_logonpasswords_lsass_memory_dump_pcapng.zip | Data | 2.1 MB | 4855ec179b79 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/LSASS_campaign_01/metasploit_logonpasswords_lsass_memory_dump_zeek_logs.zip | Data | 14.5 KB | 56bd2798ab32 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/LSASS_campaign_02/metasploit_procdump_lsass_memory_dump.zip | Data | 2.6 MB | 2b32f11b1465 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/LSASS_campaign_02/metasploit_procdump_lsass_memory_dump_pcapng.zip | Data | 57.0 MB | 52429e75ebf1 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/LSASS_campaign_02/metasploit_procdump_lsass_memory_dump_zeek_logs.zip | Data | 10.9 KB | b3fba904c0e7 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/LSASS_campaign_03/metasploit_comsvcs_lsass_memory_dump.zip | Data | 2.3 MB | 97a834cd72b0 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/LSASS_campaign_03/metasploit_comsvcs_lsass_memory_dump_pcapng.zip | Data | 56.5 MB | c9052549b6d1 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/LSASS_campaign_03/metasploit_comsvcs_lsass_memory_dump_zeek_logs.zip | Data | 13.6 KB | 9246f2347234 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/LSASS_campaign_04/metasploit_out-minidump_lsass_memory_dump.zip | Data | 2.4 MB | d6150eab4013 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/LSASS_campaign_04/metasploit_out-minidump_lsass_memory_dump_pcapng.zip | Data | 63.0 MB | 8fcc093b0007 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/LSASS_campaign_04/metasploit_out-minidump_lsass_memory_dump_zeek_logs.zip | Data | 12.5 KB | e9ef9c5bc099 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/LSASS_campaign_05/metasploit_sharpdump_lsass_memory_dump.zip | Data | 3.4 MB | 79e347b411be |
| collection/v2/sources/mordor_security_datasets/datasets/compound/LSASS_campaign_05/metasploit_sharpdump_lsass_memory_dump_pcapng.zip | Data | 28.7 MB | c03d0ea147ac |
| collection/v2/sources/mordor_security_datasets/datasets/compound/LSASS_campaign_05/metasploit_sharpdump_lsass_memory_dump_zeek_logs.zip | Data | 70.4 KB | d1ea135073e9 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/LSASS_campaign_06/metasploit_outflank-dumpert_lsass_memory_dump.zip | Data | 3.3 MB | ee996c0ddc32 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/LSASS_campaign_06/metasploit_outflank-dumpert_lsass_memory_dump_pcapng.zip | Data | 57.2 MB | 32dab91ed8f8 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/LSASS_campaign_06/metasploit_outflank-dumpert_lsass_memory_dump_zeek_logs.zip | Data | 62.1 KB | 3323a3de4a61 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/LSASS_campaign_07/metasploit_nanodump_lsass_memory_dump.zip | Data | 3.5 MB | 5335635ef2bc |
| collection/v2/sources/mordor_security_datasets/datasets/compound/LSASS_campaign_07/metasploit_nanodump_lsass_memory_dump_pcapng.zip | Data | 12.0 MB | 64a8cfae9a36 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/LSASS_campaign_07/metasploit_nanodump_lsass_memory_dump_zeek_logs.zip | Data | 47.1 KB | 32b265a9f412 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/Log4Shell/pcap_log4shell_cve2021_44228_java_serialized.zip | Data | 62.1 KB | 4a9f3334f6a9 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/Log4Shell/pcap_log4shell_cve2021_44228_jndi_reference.zip | Data | 3.4 KB | 8ca6128bb0f1 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/Log4Shell/securityauditing_log4shell_cve2021_44228_java_serialized_object.zip | Data | 5.3 KB | 959e1c5c8f84 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/Log4Shell/syslog_auoms_auditd_log4shell_cve2021_44228_jndi_reference.zip | Data | 4.4 KB | 20ca2d3371da |
| collection/v2/sources/mordor_security_datasets/datasets/compound/Log4Shell/syslog_sysmon_log4shell_cve2021_44228_jndi_reference.zip | Data | 7.0 KB | c667b9e7e3a7 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/Log4Shell/sysmon_log4shell_cve2021_44228_java_serialized_object.zip | Data | 33.1 KB | 69ce1f900d72 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/Log4Shell/vminsights_vmconnection_log4shell_cve2021_44228_jndi_reference.zip | Data | 1.0 KB | 7982120483aa |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/apt29_evals_day1_manual.zip | Data | 13.9 MB | 98a073140860 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/pcaps/NASHUA.zip | Data | 7.0 MB | 892b2648629c |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/pcaps/SCRANTON.zip | Data | 46.6 MB | 4c7853126831 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/NASHUA-zeek_logs.zip | Data | 71.8 KB | e1ade3d4f2c9 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/SCRANTON-zeek_logs.zip | Data | 24.7 KB | aae9d0d8c997 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/apt29_evals_day2_manual.zip | Data | 43.0 MB | 377f8cba5db9 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/pcaps/NEWYORK.zip | Data | 2.4 MB | bc39c2f7b775 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/pcaps/SCRANTON.zip | Data | 183.8 KB | 602f7d62d5d5 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/pcaps/UTICA-A.zip | Data | 4.1 MB | eee149360e66 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/pcaps/UTICA-C.zip | Data | 846.6 KB | 8b4f5ce147f0 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/pcaps/UTICA-D.zip | Data | 8.9 MB | 3907754dc82e |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/pcaps/UTICA-ONE-DRIVE.zip | Data | 151.1 KB | 86eec8fa21e8 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/NEWYORK-zeek_logs.zip | Data | 44.0 KB | 6cd3b5de581c |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/SCRANTON-zeek_logs.zip | Data | 13.1 KB | 94fbaac25809 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/UTICA-A-zeek_logs.zip | Data | 42.8 KB | c77dcd800e28 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/UTICA-C-zeek_logs.zip | Data | 9.9 KB | e3671125fc08 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/UTICA-D-zeek_logs.zip | Data | 35.7 KB | dd66d51057de |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/UTICA-ONE-DRIVE-zeek_logs.zip | Data | 17.0 KB | fbe32c91ee17 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/caldera_attack_evals_round1_day1_2019-10-20201108.tar.gz | Data | 12.6 MB | 37d2f27f2c4f |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/empire_apt3.tar.gz | Data | 28.9 MB | ab4d1ec4e441 |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/scripts/ftp.txt | Data | 85 B | — |
| collection/v2/sources/rcaeval/evaluation/case-001/inject_time.txt | Data | 10 B | bd04244df10f |
| collection/v2/sources/rcaeval/evaluation/case-002/inject_time.txt | Data | 10 B | f43e710a96d7 |
| collection/v2/sources/rcaeval/evaluation/case-003/inject_time.txt | Data | 10 B | 9173147f5bee |
| collection/v2/sources/rcaeval/evaluation/cases.parquet | Data | 29.5 KB | c49a288920db |
| collection/v2/sources/rcaeval/evaluation/selection.json | Data | 5.6 KB | 9dc293c3ce03 |
| collection/v2/sources/rcaeval/evaluation/splits.json | Data | 350 B | 301715d40020 |
| collection/v2/sources/rcaeval/evidence/assets.json | Data | 1.6 KB | 625f87e65479 |
| collection/v2/sources/rcaeval/evidence/case-001.jsonl | Data | 2.8 MB | 9a6957d270b6 |
| collection/v2/sources/rcaeval/evidence/case-002.jsonl | Data | 1.1 MB | c2a752525ce7 |
| collection/v2/sources/rcaeval/evidence/case-003.jsonl | Data | 4.8 MB | 1cda1e591344 |
| collection/v2/sources/rcaeval/provenance/downloads.json | Data | 6.4 KB | a9443199a8d1 |
| collection/v2/sources/rcaeval/provenance/tree-page-1.json | Data | 143.1 KB | b9886abe1838 |
| collection/v2/sources/rcaeval/provenance/tree-page-2.json | Data | 245.6 KB | ed44c1890f0f |
| collection/v2/sources/rcaeval/provenance/tree-page-3.json | Data | 216.5 KB | e9b4af067623 |
| collection/v2/sources/rcaeval/provenance/tree.json | Data | 744.5 KB | b5b89ffe5ee8 |
| collection/v2/sources/rcaeval/raw/case-001/logs.parquet | Data | 88.1 KB | ee8ab1e09786 |
| collection/v2/sources/rcaeval/raw/case-001/metrics.parquet | Data | 145.4 KB | 098251f8162f |
| collection/v2/sources/rcaeval/raw/case-001/traces.parquet | Data | 3.4 MB | 4fe4f35bd256 |
| collection/v2/sources/rcaeval/raw/case-002/logs.parquet | Data | 506.1 KB | c8ba2540b6d3 |
| collection/v2/sources/rcaeval/raw/case-002/metrics.parquet | Data | 159.9 KB | 476b6547a3ed |
| collection/v2/sources/rcaeval/raw/case-003/logs.parquet | Data | 183.3 KB | 052a03b86cdd |
| collection/v2/sources/rcaeval/raw/case-003/metrics.parquet | Data | 754.3 KB | 411b52734800 |
| collection/v2/sources/rcaeval/raw/case-003/traces.parquet | Data | 1.2 MB | 56e5e078f41c |
| collection/v2/sources/rcaeval/summary.json | Data | 77.6 KB | ab2834c31b59 |
| collection/v2/sources/sev_curriculum_repair_v1/publication.json | Data | 962 B | 8dec1adacc90 |
| collection/v2/sources/sev_excytin_native_v1/CDLA-Permissive-2.0.txt | Data | 2.4 KB | 4531a67d4432 |
| collection/v2/sources/sev_excytin_native_v1/calibration.jsonl | Data | 331.8 KB | 757577f144a7 |
| collection/v2/sources/sev_excytin_native_v1/development.jsonl | Data | 329.3 KB | 3017a2a1b9d9 |
| collection/v2/sources/sev_excytin_native_v1/manifest.json | Data | 11.6 KB | 1a537e295dce |
| collection/v2/sources/sev_excytin_native_v1/publication.json | Data | 900 B | 7629b699c4d9 |
| collection/v2/sources/sev_excytin_native_v1/train.jsonl | Data | 1.8 MB | d281cde30a07 |
| collection/v2/sources/sev_guide_detector_v1/CDLA-Permissive-2.0.txt | Data | 2.4 KB | 4531a67d4432 |
| collection/v2/sources/sev_guide_detector_v1/calibration.jsonl | Data | 1.6 MB | ce09cf74307c |
| collection/v2/sources/sev_guide_detector_v1/development.jsonl | Data | 1.6 MB | 23dad9072ff2 |
| collection/v2/sources/sev_guide_detector_v1/manifest.json | Data | 2.7 KB | 507cefca384f |
| collection/v2/sources/sev_guide_detector_v1/publication.json | Data | 992 B | 5515bea6bb5c |
| collection/v2/sources/sev_guide_detector_v1/train.jsonl | Data | 2.6 MB | 68e1ce7550de |
| collection/v2/sources/sev_guide_v1/CDLA-Permissive-2.0.txt | Data | 2.4 KB | 4531a67d4432 |
| collection/v2/sources/sev_guide_v1/calibration.jsonl | Data | 241.3 KB | 4ed6b163dbd7 |
| collection/v2/sources/sev_guide_v1/development.jsonl | Data | 320.2 KB | f8ffbbe89818 |
| collection/v2/sources/sev_guide_v1/manifest.json | Data | 5.6 KB | 50245db12549 |
| collection/v2/sources/sev_guide_v1/publication.json | Data | 895 B | 313481433b22 |
| collection/v2/sources/sev_guide_v1/train.jsonl | Data | 2.5 MB | c58697710959 |
| collection/v2/sources/sev_mixed_public_v1/publication.json | Data | 918 B | fbc215796459 |
| collection/v2/sources/sev_sysmon_native_v2/calibration.jsonl | Data | 479.8 KB | c306d79f73cb |
| collection/v2/sources/sev_sysmon_native_v2/development.jsonl | Data | 544.3 KB | d2cfa4c00eac |
| collection/v2/sources/sev_sysmon_native_v2/manifest.json | Data | 6.9 KB | e8c3b5dd3065 |
| collection/v2/sources/sev_sysmon_native_v2/publication.json | Data | 900 B | 206fc4fa0253 |
| collection/v2/sources/sev_sysmon_native_v2/train.jsonl | Data | 1.2 MB | cc1fe8c24d23 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.001/atomic_red_team/procdump_t1003.001_capattack.zip | Data | 2.9 MB | 3ed28b934849 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.002/atomic_red_team/attack-range-windows-domain-controller.json | Data | 24.1 MB | 5a7488623064 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.003/atomic_red_team/ntds_T1003.003_capattack.zip | Data | 6.1 MB | 5ca5b0e81d14 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027/atomic_red_team/attack_data.json | Data | 21.8 MB | 97bc57189eaa |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027/atomic_red_team/attack_data.tar.gz | Data | 755.8 KB | 96b0b987ed22 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1046/kubernetes_scanning/kubernetes_scanning.json | Data | 5.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/atomic_red_team/attack_data.json | Data | 22.5 MB | 25021beb428b |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/atomic_red_team/attack_data.tar.gz | Data | 790.6 KB | 04d4679fa146 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/atomic_red_team/attack_data.json | Data | 25.3 MB | 75f0cca49b74 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/atomic_red_team/attack_data.tar.gz | Data | 879.0 KB | 4b7f017d6a5b |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.007/kubernetes_audit_cron_job_creation/kubernetes_audit_cron_job_creation.json | Data | 4.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.004/aws_login_sfa/cloudtrail.json | Data | 2.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/assume_role_with_saml/assume_role_with_saml.json | Data | 83.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/attach_role_trust_policy/attach_role_trust_policy.json | Data | 1.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/attach_user_to_role/attach_user_to_role.json | Data | 1.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/aws_create_policy_version/asl_ocsf_cloudtrail.json | Data | 3.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/aws_create_policy_version/aws_cloudtrail_events.json | Data | 3.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/aws_createaccesskey/amazon_security_lake.json | Data | 1.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/aws_createaccesskey/asl_ocsf_cloudtrail.json | Data | 2.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/aws_createaccesskey/aws_cloudtrail_events.json | Data | 89.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/aws_createloginprofile/aws_cloudtrail_events.json | Data | 42.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/aws_saml_access_by_provider_user_and_principal/aws_saml_access_by_provider_user_and_principal.json | Data | 17.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/aws_saml_update_identity_provider/aws_saml_update_identity_provider.json | Data | 4.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/aws_setdefaultpolicyversion/aws_cloudtrail_events.json | Data | 3.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/aws_updateloginprofile/asl_ocsf_cloudtrail.json | Data | 2.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/aws_updateloginprofile/aws_cloudtrail_events.json | Data | 1.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/create_IAM_role/create_IAM_role.json | Data | 2.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/gcploit_exploitation_framework/gcploit_exploitation_framework.json | Data | 709 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/high_risk_permission_by_resource/high_risk_permission_by_resource.json | Data | 437 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/high_risk_role_by_project/high_risk_role_by_project.json | Data | 1.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/o365_excessive_sso_logon_errors/o365_excessive_sso_logon_errors.json | Data | 2.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/sts_assumerole_usage/sts_assumerole_usage.json | Data | 8.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/update_saml_provider/asl_ocsf_cloudtrail.json | Data | 2.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/update_saml_provider/update_saml_provider.json | Data | 680.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.004/aws_invoke_model_access_denied/cloudtrail.json | Data | 1.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/aws_iam_delete_policy/amazon_security_lake.json | Data | 6.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/aws_iam_delete_policy/asl_ocsf_cloudtrail.json | Data | 2.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/aws_iam_delete_policy/aws_iam_delete_policy.json | Data | 107.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/aws_iam_failure_group_deletion/asl_ocsf_cloudtrail.json | Data | 2.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/aws_iam_failure_group_deletion/aws_iam_failure_group_deletion.json | Data | 47.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/aws_iam_successful_group_deletion/asl_ocsf_cloudtrail.json | Data | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/aws_iam_successful_group_deletion/aws_iam_successful_group_deletion.json | Data | 77.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.001/aws_login_failure/aws_cloudtrail_events.json | Data | 8.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.001/high_number_of_login_failures_from_a_single_source/high_number_of_login_failures_from_a_single_source.json | Data | 51.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.002/aws_rds_password_reset/asl_ocsf_cloudtrail.json | Data | 14.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.002/aws_rds_password_reset/aws_cloudtrail_events.json | Data | 8.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/aws_mulitple_failed_console_login/aws_cloudtrail.json | Data | 35.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/aws_multiple_login_fail_per_user/cloudtrail.json | Data | 26.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/gcp_gws_multiple_login_failure/gws_login.json | Data | 16.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110/o365_brute_force_login/o365_brute_force_login.json | Data | 2.9 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114.002/suspicious_rights_delegation/suspicious_rights_delegation.json | Data | 226.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114.003/o365_mailbox_forwarding_enabled/o365_mailbox_forwarding_enabled.json | Data | 128.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114/o365_export_pst_file/o365_export_pst_file.json | Data | 2.9 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1119/aws_exfil_datasync/cloudtrail.json | Data | 8.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/o365_add_app_role_assignment_grant_user/o365_add_app_role_assignment_grant_user.json | Data | 8.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/o365_add_service_principal/o365_add_service_principal.json | Data | 15.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/o365_added_service_principal/o365_added_service_principal.json | Data | 7.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/o365_new_federated_domain/o365_new_federated_domain.json | Data | 1.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/o365_new_federated_domain_added/o365_new_federated_domain_added.json | Data | 703 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/o365_new_federation/o365_new_federation.json | Data | 58.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1185/aws_concurrent_sessions_from_different_ips/asl_ocsf_cloudtrail.json | Data | 7.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1185/aws_concurrent_sessions_from_different_ips/cloudtrail.json | Data | 2.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/exchange_events.json | Data | 628.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/outbound_ldap/bro_conn.json | Data | 807 B | — |
| APACHE_LICENSE | Documentation | 11.3 KB | — |
| LICENSE.md | Documentation | 790 B | — |
| README.md | Documentation | 8.8 KB | — |
| collection/v2/COLLECTION.md | Documentation | 5.4 KB | 0a52190cf8e6 |
| collection/v2/experiments/response-policy-v2/catalog/COLLECTION.md | Documentation | 3.4 KB | 80e7cc1641c4 |
| collection/v2/experiments/response-policy-v2/curriculum-v2/README.md | Documentation | 1.3 KB | 889e9fe3b173 |
| collection/v2/experiments/response-policy-v2/dns-incident-v1/README.md | Documentation | 1.2 KB | 9728142e4984 |
| collection/v2/experiments/response-policy-v2/policy-v2/README.md | Documentation | 1.2 KB | 1cc536ee51e9 |
| collection/v2/experiments/response-policy-v2/transfer-v2/README.md | Documentation | 1.3 KB | 2037cf340eb8 |
| collection/v2/experiments/swarmtraces-v1/catalog/COLLECTION.md | Documentation | 6.6 KB | ee49d1a4e5bc |
| collection/v2/experiments/swarmtraces-v1/catalog/EXPERIMENTS.md | Documentation | 1.6 KB | b3ac30d1e308 |
| collection/v2/experiments/swarmtraces-v1/curriculum-v1/README.md | Documentation | 1.6 KB | fe1150c1418e |
| collection/v2/experiments/swarmtraces-v1/manual-v1/README.md | Documentation | 1.7 KB | 7c8b651e075c |
| collection/v2/experiments/swarmtraces-v1/static-v1/README.md | Documentation | 1.8 KB | 70274e5ec028 |
| collection/v2/experiments/swarmtraces-v1/transfer-v1/README.md | Documentation | 1.6 KB | 1e6da2e95afb |
| collection/v2/license-evidence/excytin_bench_source_v1-0.md | Documentation | 1.1 KB | 44fb9ab9c369 |
| collection/v2/license-evidence/microsoft_guide_source_v2-0.md | Documentation | 9.7 KB | 1a05e506cff0 |
| collection/v2/license-evidence/rcaeval-0.md | Documentation | 7.9 KB | c2990bbe2e04 |
| collection/v2/license-evidence/synergy-0.md | Documentation | 3.2 KB | 28a78e4f9e30 |
| collection/v2/sources/bpi2019/README.md | Documentation | 4.5 KB | 309072e9d8a8 |
| collection/v2/sources/contractnli/README.md | Documentation | 1.6 KB | 6f5bee6a21d9 |
| collection/v2/sources/contractnli/full-question-smoke/README.md | Documentation | 1.4 KB | 310f53398797 |
| collection/v2/sources/contractnli/initial-smoke/README.md | Documentation | 1.4 KB | 789a99529eac |
| collection/v2/sources/contractnli/raw/LICENSE | Documentation | 18.7 KB | 9e5f1b3c610b |
| collection/v2/sources/defects4j/README.md | Documentation | 2.8 KB | 619f34a6bada |
| collection/v2/sources/defects4j/provenance/defects4j-README.md | Documentation | 21.7 KB | 5f1a7e351188 |
| collection/v2/sources/defects4j/provenance/defects4j-license.txt | Documentation | 1.3 KB | 4a1f097e4ad6 |
| collection/v2/sources/defects4j/raw/case-001/project/LICENSE.txt | Documentation | 11.4 KB | cfc7749b96f6 |
| collection/v2/sources/evtx_attack_samples/AutomatedTestingTools/Malware/readme.md | Documentation | 64 B | — |
| collection/v2/sources/evtx_attack_samples/AutomatedTestingTools/readme.md | Documentation | 393 B | 6d7de6a70a09 |
| collection/v2/sources/evtx_attack_samples/Command and Control/readme.md | Documentation | 728 B | e44035f8f0af |
| collection/v2/sources/evtx_attack_samples/EVTX_ATT&CK_Metadata/README.md | Documentation | 941 B | 081853c41b8a |
| collection/v2/sources/evtx_attack_samples/LICENSE.GPL | Documentation | 35.1 KB | 589ed823e9a8 |
| collection/v2/sources/evtx_attack_samples/Other/emotet/README.md | Documentation | 76 B | 8a62f1f909b5 |
| collection/v2/sources/evtx_attack_samples/README.md | Documentation | 2.2 KB | 4ce6fb5c33a9 |
| collection/v2/sources/excytin_bench_source_v1/README.md | Documentation | 752 B | 402198fae28b |
| collection/v2/sources/excytin_bench_source_v1/aces-LICENSE | Documentation | 1.1 KB | c2cfccb812fe |
| collection/v2/sources/excytin_bench_source_v1/aces-NOTICE.md | Documentation | 207 B | bd6d55721d20 |
| collection/v2/sources/excytin_bench_source_v1/excytin-card.md | Documentation | 1.1 KB | 44fb9ab9c369 |
| collection/v2/sources/microsoft_guide_source_v2/README.md | Documentation | 566 B | 5f3b49cda786 |
| collection/v2/sources/microsoft_guide_source_v2/guide-description.md | Documentation | 9.7 KB | 1a05e506cff0 |
| collection/v2/sources/mordor_security_datasets/LICENSE | Documentation | 1.1 KB | — |
| collection/v2/sources/mordor_security_datasets/README.md | Documentation | 2.2 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/GoldenSAMLADFSMailAccess/README.md | Documentation | 653 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/README.md | Documentation | 6.4 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/README.md | Documentation | 4.0 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/pcaps/README.md | Documentation | 26 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/pcaps/README.md | Documentation | 26 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/README.md | Documentation | 2.4 KB | — |
| collection/v2/sources/rcaeval/README.md | Documentation | 2.8 KB | af180ff9e6d8 |
| collection/v2/sources/rcaeval/provenance/dataset-card.md | Documentation | 7.9 KB | c2990bbe2e04 |
| collection/v2/sources/sev_curriculum_repair_v1/README.md | Documentation | 703 B | 96b76e086a95 |
| collection/v2/sources/sev_excytin_native_v1/README.md | Documentation | 682 B | 1f486d1ac9b9 |
| collection/v2/sources/sev_guide_detector_v1/README.md | Documentation | 589 B | 7eafc9ba7680 |
| collection/v2/sources/sev_guide_v1/README.md | Documentation | 583 B | 20726777f827 |
| collection/v2/sources/sev_mixed_public_v1/README.md | Documentation | 684 B | df1283044276 |
| collection/v2/sources/sev_sysmon_native_v2/OTRF-LICENSE.txt | Documentation | 1.1 KB | fce88163b60d |
| collection/v2/sources/sev_sysmon_native_v2/README.md | Documentation | 778 B | d2a5d63fcee7 |
| collection/v2/sources/splunk_attack_data/LICENSE | Documentation | 11.3 KB | — |
| collection/v2/sources/splunk_attack_data/README.md | Documentation | 6.5 KB | — |
| collection/v2/license-evidence/evtx_attack_samples-0.GPL | Other | 35.1 KB | 589ed823e9a8 |
| collection/v2/sources/behavioral_v1/source/audit_sev_behavioral_world.py | Other | 31.6 KB | — |
| collection/v2/sources/behavioral_v1/source/behavioral_scenarios.py | Other | 15.1 KB | — |
| collection/v2/sources/behavioral_v1/source/behavioral_world.py | Other | 23.3 KB | — |
| collection/v2/sources/behavioral_v1/source/build_sev_behavioral.py | Other | 16.3 KB | — |
| collection/v2/sources/bpi2019/raw/BPI_Challenge_2019.xes | Other | 728.6 MB | af63bc687fc4 |
| collection/v2/sources/contractnli/initial-smoke/preparation-source.py | Other | 14.3 KB | d899617af5d3 |
| collection/v2/sources/ctu_sme_11/Windows7AD-1.tar.bz2 | Other | 1.6 GB | 1654712980ae |
| collection/v2/sources/defects4j/evaluation/fixed-NumberUtils.java | Other | 49.5 KB | 0374c7b48662 |
| collection/v2/sources/defects4j/evaluation/fixed-NumberUtilsTest.java | Other | 67.7 KB | 44c47cc11b6c |
| collection/v2/sources/defects4j/evaluation/source.patch | Other | 1.3 KB | a0c88e6d5f96 |
| collection/v2/sources/defects4j/evaluation/test.patch | Other | 3.6 KB | 620404b06c70 |
| collection/v2/sources/defects4j/raw/case-001/project/pom.xml | Other | 19.6 KB | 0110b202c1c9 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/AnnotationUtils.java | Other | 13.9 KB | e3bcf0e2ed85 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/ArrayUtils.java | Other | 235.8 KB | c34d29a9ed3f |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/BitField.java | Other | 8.7 KB | 63354c9cb657 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/BooleanUtils.java | Other | 42.1 KB | 1c90971a0ca1 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/CharEncoding.java | Other | 4.2 KB | 75f78bfa5270 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/CharRange.java | Other | 11.1 KB | f7995686b787 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/CharSequenceUtils.java | Other | 8.6 KB | a8d916b9af69 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/CharSet.java | Other | 9.1 KB | 1a622c7688cb |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/CharSetUtils.java | Other | 9.2 KB | ecc7aafb2b6c |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/CharUtils.java | Other | 18.3 KB | d5afe664c295 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/ClassUtils.java | Other | 45.8 KB | 895ee3b27217 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/Conversion.java | Other | 65.7 KB | 8786fa07d851 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/EnumUtils.java | Other | 14.0 KB | 671c2841ed02 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/JavaVersion.java | Other | 4.5 KB | a4b87b78bb18 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/LocaleUtils.java | Other | 13.2 KB | 7c33beb02231 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/ObjectUtils.java | Other | 35.3 KB | ac65428b215c |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/RandomStringUtils.java | Other | 13.0 KB | 794dee420800 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/Range.java | Other | 18.0 KB | e6bc306c3125 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/SerializationException.java | Other | 2.5 KB | a0636de2229a |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/SerializationUtils.java | Other | 13.1 KB | dd886d7da935 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/StringEscapeUtils.java | Other | 25.3 KB | 4557a973061d |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/StringUtils.java | Other | 297.9 KB | 0170542292bf |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/SystemUtils.java | Other | 50.4 KB | 1376b2b4568a |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/Validate.java | Other | 50.3 KB | 6cc187882b6a |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/builder/Builder.java | Other | 3.0 KB | 90f35ada72f0 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/builder/CompareToBuilder.java | Other | 37.4 KB | 34fc266834b1 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/builder/EqualsBuilder.java | Other | 32.7 KB | e2e4f3e28c3e |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/builder/HashCodeBuilder.java | Other | 32.3 KB | b6c2e17979a7 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/builder/IDKey.java | Other | 2.5 KB | 34e71ab04c59 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/builder/ReflectionToStringBuilder.java | Other | 24.2 KB | 0daeca44c2e1 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/builder/StandardToStringStyle.java | Other | 18.0 KB | eb3e3d2cf4e0 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/builder/ToStringBuilder.java | Other | 36.6 KB | 0a539f8bfb32 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/builder/ToStringStyle.java | Other | 76.4 KB | 62bd0e8994e9 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/concurrent/AtomicInitializer.java | Other | 4.8 KB | c4818fea8d77 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/concurrent/AtomicSafeInitializer.java | Other | 4.0 KB | 800549df90fe |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/concurrent/BackgroundInitializer.java | Other | 13.3 KB | c528b787f386 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/concurrent/BasicThreadFactory.java | Other | 14.1 KB | e2c4ce61a2c4 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/concurrent/CallableBackgroundInitializer.java | Other | 4.9 KB | 98b424022b95 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/concurrent/ConcurrentException.java | Other | 2.5 KB | 56d2b1d02721 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/concurrent/ConcurrentInitializer.java | Other | 2.3 KB | 9326742f721e |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/concurrent/ConcurrentRuntimeException.java | Other | 2.7 KB | 12cde10c2974 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/concurrent/ConcurrentUtils.java | Other | 15.3 KB | d08650422efa |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/concurrent/ConstantInitializer.java | Other | 4.5 KB | 93dbe78a2f35 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/concurrent/LazyInitializer.java | Other | 4.7 KB | a63a05c0c5a7 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/concurrent/MultiBackgroundInitializer.java | Other | 15.0 KB | b121b2bc7ed9 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/concurrent/TimedSemaphore.java | Other | 16.1 KB | 5e862bd3b3fc |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/event/EventListenerSupport.java | Other | 12.0 KB | 4c68336938c8 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/event/EventUtils.java | Other | 6.0 KB | 2ccc96c61271 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/exception/CloneFailedException.java | Other | 2.1 KB | 34f0c0c3c136 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/exception/ContextedException.java | Other | 8.8 KB | 778bac78e532 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/exception/ContextedRuntimeException.java | Other | 8.9 KB | 9a873c87ef67 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/exception/DefaultExceptionContext.java | Other | 5.4 KB | 66de8fd3c581 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/exception/ExceptionContext.java | Other | 3.9 KB | ad07e3f4b25c |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/exception/ExceptionUtils.java | Other | 28.7 KB | 1cb747b1d601 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/math/Fraction.java | Other | 35.5 KB | c508a3e60fdd |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/math/IEEE754rUtils.java | Other | 8.2 KB | 570d51670dc9 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/math/NumberUtils.java | Other | 49.0 KB | 14ebbdea51d9 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/mutable/Mutable.java | Other | 1.9 KB | 884f398fd2fe |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/mutable/MutableBoolean.java | Other | 5.9 KB | 43b918064e39 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/mutable/MutableByte.java | Other | 8.0 KB | d6c733006861 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/mutable/MutableDouble.java | Other | 9.7 KB | f8029c72dcd6 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/mutable/MutableFloat.java | Other | 9.7 KB | afe68c863416 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/mutable/MutableInt.java | Other | 7.8 KB | 47904c0ef289 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/mutable/MutableLong.java | Other | 7.9 KB | 21cb3435f48e |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/mutable/MutableObject.java | Other | 3.8 KB | 10c3befc268f |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/mutable/MutableShort.java | Other | 8.1 KB | 3f9aaf02b7f2 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/reflect/ConstructorUtils.java | Other | 12.9 KB | 2c51472e68aa |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/reflect/FieldUtils.java | Other | 30.5 KB | b929678b0308 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/reflect/MemberUtils.java | Other | 7.3 KB | c13b1b7e3df6 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/reflect/MethodUtils.java | Other | 22.7 KB | b648fabb609a |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/reflect/TypeUtils.java | Other | 44.8 KB | 5bfd4080ff41 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/text/CompositeFormat.java | Other | 3.7 KB | 0dd10bbd0f23 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/text/ExtendedMessageFormat.java | Other | 19.4 KB | 4cbeda3059ef |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/text/FormatFactory.java | Other | 1.5 KB | d9b6faeb942a |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/text/FormattableUtils.java | Other | 6.7 KB | 07a77a53aa4c |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/text/StrBuilder.java | Other | 102.1 KB | e4f56ac07aef |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/text/StrLookup.java | Other | 6.1 KB | d12609151f30 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/text/StrMatcher.java | Other | 15.1 KB | a22dc58a785e |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/text/StrSubstitutor.java | Other | 41.5 KB | 177fe6e1076a |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/text/WordUtils.java | Other | 19.4 KB | 9645607a833e |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/text/translate/AggregateTranslator.java | Other | 2.1 KB | 7f8825645d66 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/text/translate/CharSequenceTranslator.java | Other | 5.0 KB | 38151c414d0f |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/text/translate/CodePointTranslator.java | Other | 2.1 KB | fcc1c73251e3 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/text/translate/EntityArrays.java | Other | 25.2 KB | 37f8a9ac24e5 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/text/translate/JavaUnicodeEscaper.java | Other | 4.1 KB | af91b6be7d7e |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/text/translate/LookupTranslator.java | Other | 3.0 KB | 01724dbf336a |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/text/translate/NumericEntityEscaper.java | Other | 4.3 KB | 9f6804f7633e |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/text/translate/NumericEntityUnescaper.java | Other | 5.1 KB | 8c8976ce04db |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/text/translate/OctalUnescaper.java | Other | 2.3 KB | dbc09e6a528c |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/text/translate/UnicodeEscaper.java | Other | 5.0 KB | 6454fadfaa94 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/text/translate/UnicodeUnescaper.java | Other | 2.6 KB | 1698f2a32cff |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/time/DateFormatUtils.java | Other | 12.7 KB | cdbdae02c0b3 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/time/DateParser.java | Other | 3.3 KB | b37bb106c254 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/time/DatePrinter.java | Other | 3.8 KB | 0c1c2c414370 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/time/DateUtils.java | Other | 82.8 KB | 3f39e2a0abee |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/time/DurationFormatUtils.java | Other | 26.1 KB | 9e8abb7b7066 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/time/FastDateFormat.java | Other | 20.8 KB | 3f57aa0670e3 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/time/FastDateParser.java | Other | 27.2 KB | b9469492d6a0 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/time/FastDatePrinter.java | Other | 39.4 KB | 4c51c777e216 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/time/FormatCache.java | Other | 11.3 KB | a2e5be4f523b |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/time/StopWatch.java | Other | 11.2 KB | 1cea75c34007 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/tuple/ImmutablePair.java | Other | 3.3 KB | 6bc5ba975e81 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/tuple/ImmutableTriple.java | Other | 3.3 KB | 42ddc61f116f |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/tuple/MutablePair.java | Other | 3.4 KB | e4f4d7792f83 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/tuple/MutableTriple.java | Other | 3.7 KB | 7ac04c090e93 |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/tuple/Pair.java | Other | 6.3 KB | 6c564e01c04e |
| collection/v2/sources/defects4j/raw/case-001/project/src/main/java/org/apache/commons/lang3/tuple/Triple.java | Other | 5.9 KB | 6c0187a7b5a1 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/AnnotationUtilsTest.java | Other | 19.2 KB | 4b7f4074c191 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/ArrayUtilsAddTest.java | Other | 30.0 KB | fd36638e7c81 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/ArrayUtilsRemoveMultipleTest.java | Other | 59.2 KB | ab40f504f214 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/ArrayUtilsRemoveTest.java | Other | 23.9 KB | 460e9e6984c2 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/ArrayUtilsTest.java | Other | 126.9 KB | 5f8c7cd10d1a |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/BitFieldTest.java | Other | 10.0 KB | 7ae585e268a5 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/BooleanUtilsTest.java | Other | 37.2 KB | 940861ca0b09 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/CharEncodingTest.java | Other | 4.2 KB | aea780ebceed |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/CharRangeTest.java | Other | 15.0 KB | 75186935115b |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/CharSequenceUtilsTest.java | Other | 3.3 KB | 708a99cfc431 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/CharSetTest.java | Other | 18.9 KB | bf1db730efb6 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/CharSetUtilsTest.java | Other | 12.7 KB | d698cdc9dc66 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/CharUtilsPerfRun.java | Other | 5.8 KB | a3156398f9c6 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/CharUtilsTest.java | Other | 13.5 KB | d4d1975d75a7 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/ClassUtilsTest.java | Other | 69.7 KB | 09cdf8ba16b9 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/ConversionTest.java | Other | 100.6 KB | 9cd0f6d18406 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/EnumUtilsTest.java | Other | 19.8 KB | 36d793c3ec36 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/HashSetvBitSetTest.java | Other | 6.3 KB | fa90f3409837 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/JavaVersionTest.java | Other | 3.0 KB | 628860f3c820 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/LocaleUtilsTest.java | Other | 22.2 KB | 3cd845f6e80c |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/ObjectUtilsTest.java | Other | 27.7 KB | 989e4d8ae0eb |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/RandomStringUtilsTest.java | Other | 14.3 KB | f1bc5b964614 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/RangeTest.java | Other | 13.4 KB | 18da93df784a |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/SerializationUtilsTest.java | Other | 15.1 KB | 69d8935f697f |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/StringEscapeUtilsTest.java | Other | 24.4 KB | c12f8b22cc55 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/StringUtilsEqualsIndexOfTest.java | Other | 50.7 KB | 6d950dde626c |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/StringUtilsIsTest.java | Other | 8.0 KB | fdf784181e5c |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/StringUtilsStartsEndsWithTest.java | Other | 10.6 KB | 24716320b465 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/StringUtilsSubstringTest.java | Other | 15.1 KB | d5fc24843f80 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/StringUtilsTest.java | Other | 114.0 KB | b4b579f04179 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/StringUtilsTrimEmptyTest.java | Other | 13.4 KB | a95adf32062e |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/SystemUtilsTest.java | Other | 18.2 KB | 6e1b067b81fb |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/ValidateTest.java | Other | 33.8 KB | be8d04d4d334 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/builder/CompareToBuilderTest.java | Other | 51.8 KB | 1cec62a9ea81 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/builder/DefaultToStringStyleTest.java | Other | 6.6 KB | 720f8d28e7be |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/builder/EqualsBuilderTest.java | Other | 43.1 KB | e56c49efde5b |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/builder/HashCodeBuilderAndEqualsBuilderTest.java | Other | 4.9 KB | a26c9c333182 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/builder/HashCodeBuilderTest.java | Other | 23.0 KB | b203ed7f2e15 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/builder/MultiLineToStringStyleTest.java | Other | 9.3 KB | f70d30cfff2d |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/builder/NoFieldNamesToStringStyleTest.java | Other | 6.5 KB | 203c4b493b69 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/builder/ReflectionToStringBuilderConcurrencyTest.java | Other | 4.7 KB | 36e6d5cdaa64 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/builder/ReflectionToStringBuilderExcludeTest.java | Other | 5.2 KB | 7bd8f9944034 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/builder/ReflectionToStringBuilderMutateInspectConcurrencyTest.java | Other | 3.7 KB | 2259f712ca93 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/builder/ShortPrefixToStringStyleTest.java | Other | 6.5 KB | ea93afaa28b5 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/builder/SimpleToStringStyleTest.java | Other | 5.8 KB | bc03fc4bca9d |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/builder/StandardToStringStyleTest.java | Other | 6.9 KB | 4072bcc6b5ec |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/builder/ToStringBuilderTest.java | Other | 48.4 KB | afc362473421 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/builder/ToStringStyleConcurrencyTest.java | Other | 4.3 KB | 124947a3cf82 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/builder/ToStringStyleTest.java | Other | 4.0 KB | 50d4ccae8452 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/concurrent/AbstractConcurrentInitializerTest.java | Other | 3.9 KB | b66efe256b08 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/concurrent/AtomicInitializerTest.java | Other | 1.4 KB | 475cadac134f |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/concurrent/AtomicSafeInitializerTest.java | Other | 2.5 KB | b1f32b998129 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/concurrent/BackgroundInitializerTest.java | Other | 10.5 KB | b1905aa5074f |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/concurrent/BasicThreadFactoryTest.java | Other | 11.6 KB | 349930353f4b |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/concurrent/CallableBackgroundInitializerTest.java | Other | 3.4 KB | 806385df9207 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/concurrent/ConcurrentUtilsTest.java | Other | 19.2 KB | 42003c7308bf |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/concurrent/ConstantInitializerTest.java | Other | 4.2 KB | adaba3195128 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/concurrent/LazyInitializerTest.java | Other | 2.0 KB | 2ca53cfab56d |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/concurrent/MultiBackgroundInitializerTest.java | Other | 14.8 KB | c3e1742e392b |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/concurrent/TimedSemaphoreTest.java | Other | 18.3 KB | 68ee0194fb9d |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/event/EventListenerSupportTest.java | Other | 9.6 KB | 4aafde358a48 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/event/EventUtilsTest.java | Other | 9.9 KB | 7f8c0bf81021 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/exception/AbstractExceptionContextTest.java | Other | 7.7 KB | 2f4103c42d19 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/exception/ContextedExceptionTest.java | Other | 4.7 KB | 775a1a20b0b4 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/exception/ContextedRuntimeExceptionTest.java | Other | 4.9 KB | 1b218e239f4c |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/exception/DefaultExceptionContextTest.java | Other | 1.4 KB | 659001c14725 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/exception/ExceptionUtilsTest.java | Other | 23.5 KB | 70be9e0accf1 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/math/FractionTest.java | Other | 46.7 KB | 2cafe40336d8 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/math/IEEE754rUtilsTest.java | Other | 4.3 KB | 9eddf95986d3 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/math/NumberUtilsTest.java | Other | 64.8 KB | 3a60a4df54a6 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/mutable/MutableBooleanTest.java | Other | 4.8 KB | 6008ec2c64c1 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/mutable/MutableByteTest.java | Other | 6.6 KB | e940d56c29a3 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/mutable/MutableDoubleTest.java | Other | 6.9 KB | 32fe89b4ee44 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/mutable/MutableFloatTest.java | Other | 6.8 KB | 1c32b854d3b8 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/mutable/MutableIntTest.java | Other | 6.6 KB | fccc33afb583 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/mutable/MutableLongTest.java | Other | 6.4 KB | 4362f040200c |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/mutable/MutableObjectTest.java | Other | 3.8 KB | b67a9e0918a0 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/mutable/MutableShortTest.java | Other | 6.6 KB | 044a6033e0ba |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/reflect/ConstructorUtilsTest.java | Other | 10.2 KB | 973f6fbb4693 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/reflect/FieldUtilsTest.java | Other | 54.9 KB | d1dd39ec20bf |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/reflect/MethodUtilsTest.java | Other | 17.7 KB | dc1ba1d826f3 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/reflect/TypeUtilsTest.java | Other | 33.7 KB | 197d21e7731d |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/reflect/testbed/Ambig.java | Other | 922 B | fcdaf5226ede |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/reflect/testbed/Bar.java | Other | 950 B | a324b7528ec2 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/reflect/testbed/Foo.java | Other | 950 B | 5cdad196a9c6 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/reflect/testbed/GenericParent.java | Other | 955 B | dc41e05444a2 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/reflect/testbed/GenericTypeHolder.java | Other | 1.1 KB | 334d7ad97334 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/reflect/testbed/Parent.java | Other | 1.1 KB | 2d19109f5b06 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/reflect/testbed/PrivatelyShadowedChild.java | Other | 1.1 KB | e38d2eed72a2 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/reflect/testbed/PublicChild.java | Other | 1.0 KB | 02724ca5e11d |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/reflect/testbed/PubliclyShadowedChild.java | Other | 1.1 KB | e5f45a4d2c02 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/reflect/testbed/StaticContainer.java | Other | 1.8 KB | 1b7f2b481b56 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/reflect/testbed/StaticContainerChild.java | Other | 942 B | b16fc6f04222 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/reflect/testbed/StringParameterizedChild.java | Other | 1.0 KB | f884840512c7 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/text/CompositeFormatTest.java | Other | 3.1 KB | 0e8f452effe4 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/text/ExtendedMessageFormatTest.java | Other | 20.1 KB | 5d2db4aeeb98 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/text/FormattableUtilsTest.java | Other | 8.2 KB | 36aa03559183 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/text/StrBuilderAppendInsertTest.java | Other | 52.2 KB | 7085a825f457 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/text/StrBuilderTest.java | Other | 67.1 KB | 3c26252fb894 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/text/StrLookupTest.java | Other | 2.8 KB | 92f7ce9c1a7f |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/text/StrMatcherTest.java | Other | 9.6 KB | 7791956f5650 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/text/StrSubstitutorTest.java | Other | 21.7 KB | c678bd49efbc |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/text/WordUtilsTest.java | Other | 19.4 KB | 2202de40fc7c |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/text/translate/EntityArraysTest.java | Other | 2.6 KB | 7929371dd7b7 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/text/translate/LookupTranslatorTest.java | Other | 2.1 KB | d58f5f73d7d7 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/text/translate/NumericEntityEscaperTest.java | Other | 2.4 KB | d9f442d25e55 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/text/translate/NumericEntityUnescaperTest.java | Other | 3.1 KB | b4337f997f89 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/text/translate/OctalUnescaperTest.java | Other | 2.3 KB | 53003a4f487f |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/text/translate/UnicodeEscaperTest.java | Other | 2.0 KB | 17e6afc010a0 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/text/translate/UnicodeUnescaperTest.java | Other | 2.1 KB | 77fab44da3a1 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/time/DateFormatUtilsTest.java | Other | 11.8 KB | 278f6f7b5c3d |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/time/DateUtilsFragmentTest.java | Other | 22.5 KB | 7e2973aa4feb |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/time/DateUtilsRoundingTest.java | Other | 34.1 KB | c074aaac6a7a |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/time/DateUtilsTest.java | Other | 77.7 KB | 2253a15d972e |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/time/DurationFormatUtilsTest.java | Other | 31.5 KB | a619201eea6c |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/time/FastDateFormatTest.java | Other | 14.9 KB | 3df10cf3a781 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/time/FastDateFormat_ParserTest.java | Other | 1.2 KB | a97a7fab2d0b |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/time/FastDateFormat_PrinterTest.java | Other | 1.2 KB | c23e343abca8 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/time/FastDateParserTest.java | Other | 19.9 KB | 5a8e61105d7a |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/time/FastDatePrinterTest.java | Other | 10.8 KB | a155bc0689ae |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/time/StopWatchTest.java | Other | 7.6 KB | 47822a4de2aa |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/tuple/ImmutablePairTest.java | Other | 4.2 KB | 3fb0a95d04ab |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/tuple/ImmutableTripleTest.java | Other | 5.3 KB | 4c90ee59ac62 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/tuple/MutablePairTest.java | Other | 4.3 KB | 8688a0681cfa |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/tuple/MutableTripleTest.java | Other | 5.5 KB | 5f461fff7a17 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/tuple/PairTest.java | Other | 4.6 KB | 036e6c2208f7 |
| collection/v2/sources/defects4j/raw/case-001/project/src/test/java/org/apache/commons/lang3/tuple/TripleTest.java | Other | 5.5 KB | d8acf153d17f |
| collection/v2/sources/evtx_attack_samples/AIEvent.jpg | Other | 148.4 KB | 6afa93328b30 |
| collection/v2/sources/evtx_attack_samples/AutomatedTestingTools/Malware/DE_timestomp_and_dll_sideloading_and_RunPersist.evtx | Other | 69.6 KB | — |
| collection/v2/sources/evtx_attack_samples/AutomatedTestingTools/Malware/rundll32_cmd_schtask.evtx | Other | 69.6 KB | — |
| collection/v2/sources/evtx_attack_samples/AutomatedTestingTools/Malware/rundll32_hollowing_wermgr_masquerading.evtx | Other | 69.6 KB | — |
| collection/v2/sources/evtx_attack_samples/AutomatedTestingTools/Malware/sideloading_injection_persistence_run_key.evtx | Other | 69.6 KB | — |
| collection/v2/sources/evtx_attack_samples/AutomatedTestingTools/Malware/sideloading_uacbypass_rundll32_injection_c2.evtx | Other | 69.6 KB | — |
| collection/v2/sources/evtx_attack_samples/AutomatedTestingTools/PanacheSysmon_vs_AtomicRedTeam01.evtx | Other | 1.1 MB | 6903dff9f218 |
| collection/v2/sources/evtx_attack_samples/AutomatedTestingTools/WinDefender_Events_1117_1116_AtomicRedTeam.evtx | Other | 69.6 KB | d7bebbe4a9bd |
| collection/v2/sources/evtx_attack_samples/AutomatedTestingTools/panache_sysmon_vs_EDRTestingScript.evtx | Other | 1.1 MB | 9c1371a0632d |
| collection/v2/sources/evtx_attack_samples/Command and Control/DE_RDP_Tunnel_5156.evtx | Other | 69.6 KB | 25853cab2d47 |
| collection/v2/sources/evtx_attack_samples/Command and Control/DE_RDP_Tunneling_4624.evtx | Other | 69.6 KB | 2668d3d7f050 |
| collection/v2/sources/evtx_attack_samples/Command and Control/DE_RDP_Tunneling_TerminalServices-RemoteConnectionManagerOperational_1149.evtx | Other | 1.1 MB | b9d6d1a3af56 |
| collection/v2/sources/evtx_attack_samples/Command and Control/DE_sysmon-3-rdp-tun.evtx | Other | 69.6 KB | 1d1eb55d1b7c |
| collection/v2/sources/evtx_attack_samples/Command and Control/Tunna_rdp_tunnel_IIS.log | Other | 367.9 KB | 96fae0fbbe2f |
| collection/v2/sources/evtx_attack_samples/Command and Control/bits_openvpn.evtx | Other | 1.1 MB | 9dc80ef8dd52 |
| collection/v2/sources/evtx_attack_samples/Command and Control/cmds over dns txt queries and reponses.pcap | Other | 36.2 KB | 17492c2b5771 |
| collection/v2/sources/evtx_attack_samples/Command and Control/tunna_iis_rdp_smb_tunneling_sysmon_3.evtx | Other | 69.6 KB | d7e75b35f9db |
| collection/v2/sources/evtx_attack_samples/Credential Access/4794_DSRM_password_change_t1098.evtx | Other | 69.6 KB | 6858de83024b |
| collection/v2/sources/evtx_attack_samples/Credential Access/ACL_ForcePwd_SPNAdd_User_Computer_Accounts.evtx | Other | 1.1 MB | f09f993909de |
| collection/v2/sources/evtx_attack_samples/Credential Access/CA_4624_4625_LogonType2_LogonProc_chrome.evtx | Other | 69.6 KB | 75f199b68d47 |
| collection/v2/sources/evtx_attack_samples/Credential Access/CA_DCSync_4662.evtx | Other | 69.6 KB | 679b2ff27af6 |
| collection/v2/sources/evtx_attack_samples/Credential Access/CA_Mimikatz_Memssp_Default_Logs_Sysmon_11.evtx | Other | 69.6 KB | a5c52377c8a4 |
| collection/v2/sources/evtx_attack_samples/Credential Access/CA_PetiPotam_etw_rpc_efsr_5_6.evtx | Other | 10.6 MB | 0a5d1831b776 |
| collection/v2/sources/evtx_attack_samples/Credential Access/CA_chrome_firefox_opera_4663.evtx | Other | 69.6 KB | e23b74c463d1 |
| collection/v2/sources/evtx_attack_samples/Credential Access/CA_hashdump_4663_4656_lsass_access.evtx | Other | 69.6 KB | 05fc4e1cf2a5 |
| collection/v2/sources/evtx_attack_samples/Credential Access/CA_keefarce_keepass_credump.evtx | Other | 69.6 KB | 101037366f9c |
| collection/v2/sources/evtx_attack_samples/Credential Access/CA_keepass_KeeThief_Get-KeePassDatabaseKey.evtx | Other | 69.6 KB | da1c3fc77c5e |
| collection/v2/sources/evtx_attack_samples/Credential Access/CA_protectedstorage_5145_rpc_masterkey.evtx | Other | 69.6 KB | 65931b695ed1 |
| collection/v2/sources/evtx_attack_samples/Credential Access/CA_sysmon_hashdump_cmd_meterpreter.evtx | Other | 69.6 KB | 897206ca4c3c |
| collection/v2/sources/evtx_attack_samples/Credential Access/CA_teamviewer-dumper_sysmon_10.evtx | Other | 69.6 KB | 53eaf99a0a50 |
| collection/v2/sources/evtx_attack_samples/Credential Access/LsassSilentProcessExit_process_exit_monitor_3001_lsass.evtx | Other | 69.6 KB | 9a9467f92de5 |
| collection/v2/sources/evtx_attack_samples/Credential Access/MSSQL_multiple_failed_logon_EventID_18456.evtx | Other | 69.6 KB | 014e936e1b5b |
| collection/v2/sources/evtx_attack_samples/Credential Access/Powershell_4104_MiniDumpWriteDump_Lsass.evtx | Other | 69.6 KB | 54ff62eff26a |
| collection/v2/sources/evtx_attack_samples/Credential Access/Sysmon13_MachineAccount_Password_Hash_Changed_via_LsarSetSecret.evtx | Other | 69.6 KB | f2e5df7f6929 |
| collection/v2/sources/evtx_attack_samples/Credential Access/Sysmon_13_Local_Admin_Password_Changed.evtx | Other | 69.6 KB | 821e5225b243 |
| collection/v2/sources/evtx_attack_samples/Credential Access/Zerologon_CVE-2020-1472_DFIR_System_NetLogon_Error_EventID_5805.evtx | Other | 69.6 KB | 519cdae51e2a |
| collection/v2/sources/evtx_attack_samples/Credential Access/Zerologon_VoidSec_CVE-2020-1472_4626_LT3_Anonym_follwedby_4742_DC_Anony_DC.evtx | Other | 69.6 KB | 7ea57911a3af |
| collection/v2/sources/evtx_attack_samples/Credential Access/babyshark_mimikatz_powershell.evtx | Other | 69.6 KB | 3747c33a60a3 |
| collection/v2/sources/evtx_attack_samples/Credential Access/dc_applog_ntdsutil_dfir_325_326_327.evtx | Other | 69.6 KB | 56b83f3f107a |
| collection/v2/sources/evtx_attack_samples/Credential Access/discovery_sysmon_1_iis_pwd_and_config_discovery_appcmd.evtx | Other | 1.1 MB | 5388d3281a90 |
| collection/v2/sources/evtx_attack_samples/Credential Access/etw_ad_netlogon_provider_zerologon_mimikatz.etl | Other | 41.0 KB | 97ef1a0d73e8 |
| collection/v2/sources/evtx_attack_samples/Credential Access/etw_rpc_zerologon.evtx | Other | 1.1 MB | 001b973cb13a |
| collection/v2/sources/evtx_attack_samples/Credential Access/kerberos_pwd_spray_4771.evtx | Other | 69.6 KB | 4a0a1c7132e2 |
| collection/v2/sources/evtx_attack_samples/Credential Access/phish_windows_credentials_powershell_scriptblockLog_4104.evtx | Other | 69.6 KB | 177db8fa7026 |
| collection/v2/sources/evtx_attack_samples/Credential Access/ppl_bypass_ppldump_knowdll_hijack_sysmon_security.evtx | Other | 69.6 KB | 9ac47a1ab7ac |
| collection/v2/sources/evtx_attack_samples/Credential Access/remote_pwd_reset_rpc_mimikatz_postzerologon_target_DC.evtx | Other | 69.6 KB | 6a5d703c2838 |
| collection/v2/sources/evtx_attack_samples/Credential Access/remote_sam_registry_access_via_backup_operator_priv.evtx | Other | 69.6 KB | 5eb397ece85f |
| collection/v2/sources/evtx_attack_samples/Credential Access/sysmon17_18_kekeo_tsssp_default_np.evtx | Other | 69.6 KB | 5784342008a6 |
| collection/v2/sources/evtx_attack_samples/Credential Access/sysmon_10_11_lsass_memdump.evtx | Other | 69.6 KB | 915f08592515 |
| collection/v2/sources/evtx_attack_samples/Credential Access/sysmon_10_11_outlfank_dumpert_and_andrewspecial_memdump.evtx | Other | 69.6 KB | f0d11bf8e186 |
| collection/v2/sources/evtx_attack_samples/Credential Access/sysmon_10_1_memdump_comsvcs_minidump.evtx | Other | 69.6 KB | d1bf591cabf7 |
| collection/v2/sources/evtx_attack_samples/Credential Access/sysmon_10_lsass_mimikatz_sekurlsa_logonpasswords.evtx | Other | 69.6 KB | 9a1689574ed0 |
| collection/v2/sources/evtx_attack_samples/Credential Access/sysmon_13_keylogger_directx.evtx | Other | 69.6 KB | a3ca60a7b49d |
| collection/v2/sources/evtx_attack_samples/Credential Access/sysmon_2x10_lsass_with_different_pid_RtlCreateProcessReflection.evtx | Other | 69.6 KB | 7d160c1b636f |
| collection/v2/sources/evtx_attack_samples/Credential Access/sysmon_3_10_Invoke-Mimikatz_hosted_Github.evtx | Other | 69.6 KB | 59c28ff11e4b |
| collection/v2/sources/evtx_attack_samples/Credential Access/sysmon_rdrleakdiag_lsass_dump.evtx | Other | 69.6 KB | 17f010bff45a |
| collection/v2/sources/evtx_attack_samples/Credential Access/tutto_malseclogon.evtx | Other | 69.6 KB | 7f8651fa3ed4 |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/DE_104_system_log_cleared.evtx | Other | 69.6 KB | 5579cdca073e |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/DE_1102_security_log_cleared.evtx | Other | 1.1 MB | a0615707b547 |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/DE_BYOV_Zam64_CA_Memdump_sysmon_7_10.evtx | Other | 69.6 KB | 329b2a8c70d4 |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/DE_EventLog_Service_Crashed.evtx | Other | 69.6 KB | 97637b9c858a |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/DE_Fake_ComputerAccount_4720.evtx | Other | 69.6 KB | 8b0c2b1998bb |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/DE_KernelDebug_and_TestSigning_ON_Security_4826.evtx | Other | 69.6 KB | 3fbd57015ffd |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/DE_Powershell_CLM_Disabled_Sysmon_12.evtx | Other | 69.6 KB | 3eb77febe76d |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/DE_ProcessHerpaderping_Sysmon_11_10_1_7.evtx | Other | 69.6 KB | cafd901d6b65 |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/DE_UAC_Disabled_Sysmon_12_13.evtx | Other | 69.6 KB | 06d462b8367c |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/DE_WinEventLogSvc_Crash_System_7036.evtx | Other | 69.6 KB | 026f7df81fd1 |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/DE_remote_eventlog_svc_crash_byt3bl33d3r_sysmon_17_1_3.evtx | Other | 69.6 KB | aadfd6f526c9 |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/DE_renamed_psexec_service_sysmon_17_18.evtx | Other | 69.6 KB | 3b58311891bc |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/DE_suspicious_remote_eventlog_svc_access_5145.evtx | Other | 69.6 KB | bd9b7712b67b |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/DE_xp_cmdshell_enabled_MSSQL_EID_15457.evtx | Other | 69.6 KB | 2ef4fa374e6c |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/DSE_bypass_BYOV_TDL_dummydriver_sysmon_6_7_13.evtx | Other | 69.6 KB | 1162521cb069 |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/Sysmon 7 Update Session Orchestrator Dll Hijack.evtx | Other | 1.1 MB | 7a0c54150677 |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/Sysmon 7 dllhijack_cdpsshims_CDPSvc.evtx | Other | 69.6 KB | 95b499a8478c |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/Sysmon_10_Evasion_Suspicious_NtOpenProcess_CallTrace.evtx | Other | 69.6 KB | 90c5a7871a9f |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/Sysmon_12_DE_AntiForensics_MRU_DeleteKey.evtx | Other | 69.6 KB | 1eb4fc9d4fc6 |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/Win_4985_T1186_Process_Doppelganging.evtx | Other | 69.6 KB | ec2fe6bac8ec |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/apt10_jjs_sideloading_prochollowing_persist_as_service_sysmon_1_7_8_13.evtx | Other | 69.6 KB | a623b11315ea |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/de_PsScriptBlockLogging_disabled_sysmon12_13.evtx | Other | 69.6 KB | aff2a8499651 |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/de_hiding_files_via_attrib_cmdlet.evtx | Other | 69.6 KB | 8bb94aeb8ee1 |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/de_portforward_netsh_rdp_sysmon_13_1.evtx | Other | 69.6 KB | 9ca0c561593f |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/de_powershell_execpolicy_changed_sysmon_13.evtx | Other | 69.6 KB | da5765253da6 |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/de_sysmon_13_VBA_Security_AccessVBOM.evtx | Other | 69.6 KB | 9045bbb928d9 |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/de_unmanagedpowershell_psinject_sysmon_7_8_10.evtx | Other | 69.6 KB | 13099e0dd75d |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/evasion_codeinj_odzhan_conhost_sysmon_10_1.evtx | Other | 69.6 KB | 8034cbbcf25f |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/evasion_codeinj_odzhan_spoolsv_sysmon_10_1.evtx | Other | 69.6 KB | 768feeb10b97 |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/faxhell_sysmon_7_1_18_3_bindshell_dllhijack.evtx | Other | 69.6 KB | 844b8d7aa509 |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/meterpreter_migrate_to_explorer_sysmon_8.evtx | Other | 69.6 KB | 9e6fe88d33af |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/process_suspend_sysmon_10_ga_800.evtx | Other | 69.6 KB | 21ed5dc7b3e1 |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/sideloading_wwlib_sysmon_7_1_11.evtx | Other | 69.6 KB | d6a2d4e6f886 |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/sysmon_10_1_ppid_spoofing.evtx | Other | 69.6 KB | 74dda489578f |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/sysmon_13_rdp_settings_tampering.evtx | Other | 69.6 KB | 1a877ee743da |
| collection/v2/sources/evtx_attack_samples/Defense Evasion/sysmon_2_11_evasion_timestomp_MACE.evtx | Other | 69.6 KB | 1fd461647854 |
| collection/v2/sources/evtx_attack_samples/Discovery/4799_remote_local_groups_enumeration.evtx | Other | 69.6 KB | c99849141437 |
| collection/v2/sources/evtx_attack_samples/Discovery/Discovery_Remote_System_NamedPipes_Sysmon_18.evtx | Other | 69.6 KB | 40d36563e61b |
| collection/v2/sources/evtx_attack_samples/Discovery/dicovery_4661_net_group_domain_admins_target.evtx | Other | 1.1 MB | 3e1451e5d884 |
| collection/v2/sources/evtx_attack_samples/Discovery/discovery_UEFI_Settings_rweverything_sysmon_6.evtx | Other | 69.6 KB | 1f1903ca9c4a |
| collection/v2/sources/evtx_attack_samples/Discovery/discovery_bloodhound.evtx | Other | 69.6 KB | 34f153b6384a |
| collection/v2/sources/evtx_attack_samples/Discovery/discovery_enum_shares_target_sysmon_3_18.evtx | Other | 69.6 KB | c939a9aa65b2 |
| collection/v2/sources/evtx_attack_samples/Discovery/discovery_local_user_or_group_windows_security_4799_4798.evtx | Other | 69.6 KB | dc2d739363f7 |
| collection/v2/sources/evtx_attack_samples/Discovery/discovery_meterpreter_ps_cmd_process_listing_sysmon_10.evtx | Other | 1.1 MB | 4a2f88aee90d |
| collection/v2/sources/evtx_attack_samples/Discovery/discovery_psloggedon.evtx | Other | 69.6 KB | aa2f3ad05995 |
| collection/v2/sources/evtx_attack_samples/Discovery/discovery_sysmon_18_Invoke_UserHunter_NetSessionEnum_DC-srvsvc.evtx | Other | 69.6 KB | 616a8eed6a0e |
| collection/v2/sources/evtx_attack_samples/Discovery/discovery_sysmon_3_Invoke_UserHunter_SourceMachine.evtx | Other | 69.6 KB | a743d37d41d7 |
| collection/v2/sources/evtx_attack_samples/EVTX_ATT&CK_Metadata/EVTX_Metadata.ipynb | Other | 503.5 KB | 0f076f64347d |
| collection/v2/sources/evtx_attack_samples/EVTX_ATT&CK_Metadata/Evtx/BinaryParser.py | Other | 19.4 KB | 9ddb5fc3ad89 |
| collection/v2/sources/evtx_attack_samples/EVTX_ATT&CK_Metadata/Evtx/Evtx.py | Other | 17.5 KB | e5e5701942e8 |
| collection/v2/sources/evtx_attack_samples/EVTX_ATT&CK_Metadata/Evtx/Nodes.py | Other | 49.4 KB | d329234a2bbc |
| collection/v2/sources/evtx_attack_samples/EVTX_ATT&CK_Metadata/Evtx/Views.py | Other | 10.0 KB | 32c5ab98a9e0 |
| collection/v2/sources/evtx_attack_samples/EVTX_ATT&CK_Metadata/Evtx/__init__.py | Other | 812 B | 847b1dd22dc0 |
| collection/v2/sources/evtx_attack_samples/EVTX_ATT&CK_Metadata/image_bar.png | Other | 22.6 KB | 5b9f5bc24e7f |
| collection/v2/sources/evtx_attack_samples/EVTX_ATT&CK_Metadata/image_barh.png | Other | 67.4 KB | 63ffbc6779cc |
| collection/v2/sources/evtx_attack_samples/EVTX_ATT&CK_Metadata/image_pie.png | Other | 61.2 KB | 944bceca7a36 |
| collection/v2/sources/evtx_attack_samples/EVTX_ATT&CK_Metadata/sankey.png | Other | 67.0 KB | 757e61da7d77 |
| collection/v2/sources/evtx_attack_samples/EVTX_DataSet_Stats.PNG | Other | 164.8 KB | 4483c7b0549a |
| collection/v2/sources/evtx_attack_samples/Evtx-to-Xml.ps1 | Other | 2.2 KB | 3254285d0d2d |
| collection/v2/sources/evtx_attack_samples/Execution/Exec_sysmon_meterpreter_reversetcp_msipackage.evtx | Other | 69.6 KB | 328ec1b4b6c5 |
| collection/v2/sources/evtx_attack_samples/Execution/Exec_via_cpl_Application_Experience_EventID_17_ControlPanelApplet.evtx | Other | 69.6 KB | 435da66e3edb |
| collection/v2/sources/evtx_attack_samples/Execution/Sysmon_Exec_CompiledHTML.evtx | Other | 69.6 KB | c139f6920de2 |
| collection/v2/sources/evtx_attack_samples/Execution/Sysmon_meterpreter_ReflectivePEInjection_to_notepad_.evtx | Other | 69.6 KB | 872e959cb691 |
| collection/v2/sources/evtx_attack_samples/Execution/evasion_execution_imageload_wuauclt_lolbas.evtx | Other | 69.6 KB | 6e2101b49982 |
| collection/v2/sources/evtx_attack_samples/Execution/exec_driveby_cve-2018-15982_sysmon_1_10.evtx | Other | 69.6 KB | 18c724eefbc8 |
| collection/v2/sources/evtx_attack_samples/Execution/exec_msxsl_xsl_sysmon_1_7.evtx | Other | 69.6 KB | ddaec1c8c49c |
| collection/v2/sources/evtx_attack_samples/Execution/exec_persist_rundll32_mshta_scheduledtask_sysmon_1_3_11.evtx | Other | 69.6 KB | fb5679aec77d |
| collection/v2/sources/evtx_attack_samples/Execution/exec_sysmon_1_11_lolbin_rundll32_openurl_FileProtocolHandler.evtx | Other | 69.6 KB | 11150ee64363 |
| collection/v2/sources/evtx_attack_samples/Execution/exec_sysmon_1_11_lolbin_rundll32_shdocvw_openurl.evtx | Other | 69.6 KB | a958cf481c4a |
| collection/v2/sources/evtx_attack_samples/Execution/exec_sysmon_1_11_lolbin_rundll32_zipfldr_RouteTheCall.evtx | Other | 69.6 KB | 03a43d28ce47 |
| collection/v2/sources/evtx_attack_samples/Execution/exec_sysmon_1_7_jscript9_defense_evasion.evtx | Other | 69.6 KB | 34588fcca466 |
| collection/v2/sources/evtx_attack_samples/Execution/exec_sysmon_1_ftp.evtx | Other | 69.6 KB | aadae0e31b5f |
| collection/v2/sources/evtx_attack_samples/Execution/exec_sysmon_1_lolbin_pcalua.evtx | Other | 69.6 KB | 3d99ad191360 |
| collection/v2/sources/evtx_attack_samples/Execution/exec_sysmon_1_lolbin_renamed_regsvr32_scrobj.evtx | Other | 69.6 KB | 4baa0bc603d1 |
| collection/v2/sources/evtx_attack_samples/Execution/exec_sysmon_1_lolbin_rundll32_advpack_RegisterOCX.evtx | Other | 69.6 KB | 6d5b52398a67 |
| collection/v2/sources/evtx_attack_samples/Execution/exec_sysmon_1_rundll32_pcwutl_LaunchApplication.evtx | Other | 69.6 KB | d5f8d2c61956 |
| collection/v2/sources/evtx_attack_samples/Execution/exec_sysmon_lobin_regsvr32_sct.evtx | Other | 69.6 KB | d6978888a7de |
| collection/v2/sources/evtx_attack_samples/Execution/exec_wmic_xsl_internet_sysmon_3_1_11.evtx | Other | 69.6 KB | 8b3448717a53 |
| collection/v2/sources/evtx_attack_samples/Execution/execution_evasion_visual_studio_prebuild_event.evtx | Other | 69.6 KB | 4faca379cd9e |
| collection/v2/sources/evtx_attack_samples/Execution/revshell_cmd_svchost_sysmon_1.evtx | Other | 69.6 KB | 08ce1feab22e |
| collection/v2/sources/evtx_attack_samples/Execution/rogue_msi_url_1040_1042.evtx | Other | 1.1 MB | 3e4fff1443d6 |
| collection/v2/sources/evtx_attack_samples/Execution/susp_explorer_exec.evtx | Other | 69.6 KB | e36ecc563440 |
| collection/v2/sources/evtx_attack_samples/Execution/susp_explorer_exec_root_cmdline_@[email protected] | Other | 69.6 KB | 7ad60f106034 |
| collection/v2/sources/evtx_attack_samples/Execution/sysmon_11_1_lolbas_downldr_desktopimgdownldr.evtx | Other | 69.6 KB | f63ea09964ad |
| collection/v2/sources/evtx_attack_samples/Execution/sysmon_1_11_rundll32_cpl_ostap.evtx | Other | 69.6 KB | 3a343508ea71 |
| collection/v2/sources/evtx_attack_samples/Execution/sysmon_exec_from_vss_persistence.evtx | Other | 69.6 KB | 9abd2bd89115 |
| collection/v2/sources/evtx_attack_samples/Execution/sysmon_lolbas_rundll32_zipfldr_routethecall_shell.evtx | Other | 69.6 KB | 5f83c2a19819 |
| collection/v2/sources/evtx_attack_samples/Execution/sysmon_lolbin_bohops_vshadow_exec.evtx | Other | 69.6 KB | 9cabd9accd1c |
| collection/v2/sources/evtx_attack_samples/Execution/sysmon_mshta_sharpshooter_stageless_meterpreter.evtx | Other | 69.6 KB | a2c396ac66ae |
| collection/v2/sources/evtx_attack_samples/Execution/sysmon_vbs_sharpshooter_stageless_meterpreter.evtx | Other | 69.6 KB | 57748248a6fb |
| collection/v2/sources/evtx_attack_samples/Execution/sysmon_zipexec.evtx | Other | 69.6 KB | 4d995c2a339d |
| collection/v2/sources/evtx_attack_samples/Execution/temp_scheduled_task_4698_4699.evtx | Other | 69.6 KB | a7decf0fbabc |
| collection/v2/sources/evtx_attack_samples/Execution/windows_bits_4_59_60_lolbas desktopimgdownldr.evtx | Other | 69.6 KB | 0269326ab0e3 |
| collection/v2/sources/evtx_attack_samples/HeatMap.PNG | Other | 48.5 KB | 9579dd0abef5 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/DFIR_RDP_Client_TimeZone_RdpCoreTs_104_example.evtx | Other | 69.6 KB | b0d91162d7e3 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/ImpersonateUser-via local Pass The Hash Sysmon and Security.evtx | Other | 69.6 KB | b3cdcbad2414 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_4624_mimikatz_sekurlsa_pth_source_machine.evtx | Other | 69.6 KB | bbfd87cacdd5 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_5145_Remote_FileCopy.evtx | Other | 1.1 MB | 3806a2b6662d |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_DCOM_MSHTA_LethalHTA_Sysmon_3_1.evtx | Other | 69.6 KB | 155cc5da10cb |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_ImageLoad_NFSH_Sysmon_7.evtx | Other | 69.6 KB | aca97ff41ccc |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_NewShare_Added_Sysmon_12_13.evtx | Other | 69.6 KB | 95ce1cefe507 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_PowershellRemoting_sysmon_1_wsmprovhost.evtx | Other | 69.6 KB | c890d2b67dc2 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_REMCOM_5145_TargetHost.evtx | Other | 69.6 KB | 9f6fd1e39545 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_Remote_Service01_5145_svcctl.evtx | Other | 69.6 KB | 5c49c677d0fd |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_Remote_Service02_7045.evtx | Other | 69.6 KB | af758eb492b6 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_ScheduledTask_ATSVC_target_host.evtx | Other | 69.6 KB | 53999570b8ed |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_WMIC_4648_rpcss.evtx | Other | 69.6 KB | 421b796a74d3 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_WMI_4624_4688_TargetHost.evtx | Other | 69.6 KB | 3ff3fcdb55c0 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_add_new_namedpipe_tp_nullsession_registry_turla_like_ttp.evtx | Other | 69.6 KB | 9ca45e8f1506 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_dcom_shwnd_shbrwnd_mmc20_failed_traces_system_10016.evtx | Other | 69.6 KB | aed4ec89526d |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_impacket_docmexec_mmc_sysmon_01.evtx | Other | 69.6 KB | 6c50f3c71060 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_regsvc_DirectoryServiceExtPt_Lsass_NTDS_AdamXpn.evtx | Other | 69.6 KB | c351c446c1aa |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_renamed_psexecsvc_5145.evtx | Other | 69.6 KB | 38343c258349 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_sysmon_1_12_13_3_tsclient_SharpRdp.evtx | Other | 69.6 KB | 595bfaea747c |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_sysmon_3_12_13_1_SharpRDP.evtx | Other | 69.6 KB | 2c0aa9ea79dd |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_sysmon_3_DCOM_ShellBrowserWindow_ShellWindows.evtx | Other | 69.6 KB | be5cb186b821 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_sysmon_psexec_smb_meterpreter.evtx | Other | 69.6 KB | 18ffdda9c24e |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_sysmon_remote_task_src_powershell.evtx | Other | 69.6 KB | 3b047a264a34 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_tsclient_startup_folder.evtx | Other | 69.6 KB | 8ca6304cdbdd |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_typical_IIS_webshell_sysmon_1_10_traces.evtx | Other | 69.6 KB | 6f1cb3c43538 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_winrm_exec_sysmon_1_winrshost.evtx | Other | 69.6 KB | 7115c48511d1 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_winrm_target_wrmlogs_91_wsmanShellStarted_poorLog.evtx | Other | 69.6 KB | e5d434f9ade9 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_wmi_PoisonHandler_Mr-Un1k0d3r_sysmon_1_13.evtx | Other | 69.6 KB | 9d10de497c8d |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_wmiexec_impacket_sysmon_whoami.evtx | Other | 69.6 KB | 21b8852b2b38 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/LM_xp_cmdshell_MSSQL_Events.evtx | Other | 69.6 KB | ef281c4f1068 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/MSSQL_15281_xp_cmdshell_exec_failed_attempt.evtx | Other | 69.6 KB | a39e30c118eb |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/RemotePowerShell_MS_Windows-Remote_Management_EventID_169.evtx | Other | 69.6 KB | d3305bdf0197 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/dfir_rdpsharp_target_RdpCoreTs_168_68_131.evtx | Other | 69.6 KB | daebe139e264 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/lateral_movement_startup_3_11.evtx | Other | 69.6 KB | 1ba7395ea70b |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/lm_remote_registry_sysmon_1_13_3.evtx | Other | 69.6 KB | bde8db7a364e |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/lm_sysmon_18_remshell_over_namedpipe.evtx | Other | 69.6 KB | efdb2b2f2dd0 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/net_share_drive_5142.evtx | Other | 69.6 KB | 0498ba26c42a |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/powercat_revShell_sysmon_1_3.evtx | Other | 69.6 KB | 914d90705f1f |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/remote task update 4624 4702 same logonid.evtx | Other | 69.6 KB | 82ef6ef9e761 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/remote_file_copy_system_proc_file_write_sysmon_11.evtx | Other | 69.6 KB | f03c8c5ff411 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/sharprdp_sysmon_7_mstscax.dll.evtx | Other | 69.6 KB | e75cdf11d232 |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/smb_bi_auth_conn_spoolsample.evtx | Other | 69.6 KB | 588869dc910c |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/smbmap_upload_exec_sysmon.evtx | Other | 69.6 KB | 21a69f9ea97e |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/spoolsample_5145.evtx | Other | 69.6 KB | 265dd0eafc5a |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/sysmon_1_exec_via_sql_xpcmdshell.evtx | Other | 69.6 KB | 79092a6f3c1b |
| collection/v2/sources/evtx_attack_samples/Lateral Movement/wmi_remote_registry_sysmon.evtx | Other | 69.6 KB | 2c8cb1ecaea8 |
| collection/v2/sources/evtx_attack_samples/Other/emotet/exec_emotet_ps_4104.evtx | Other | 69.6 KB | c1639a23219f |
| collection/v2/sources/evtx_attack_samples/Other/emotet/exec_emotet_ps_800_get-item.evtx | Other | 69.6 KB | ba6381380022 |
| collection/v2/sources/evtx_attack_samples/Other/emotet/exec_emotet_ps_800_invoke-item.evtx | Other | 69.6 KB | 6776429b2ac5 |
| collection/v2/sources/evtx_attack_samples/Other/emotet/exec_emotet_ps_800_new-item.evtx | Other | 69.6 KB | e65359ea8b2b |
| collection/v2/sources/evtx_attack_samples/Other/emotet/exec_emotet_ps_800_new-object.evtx | Other | 69.6 KB | b7aac9e35e5a |
| collection/v2/sources/evtx_attack_samples/Other/emotet/exec_emotet_sysmon_1.evtx | Other | 69.6 KB | 5d7347a78694 |
| collection/v2/sources/evtx_attack_samples/Other/maldoc_mshta_via_shellbrowserwind_rundll32.evtx | Other | 69.6 KB | fd59102d3989 |
| collection/v2/sources/evtx_attack_samples/Other/rdpcorets_148_mst120_bluekeep_rpdscan_full.evtx | Other | 1.1 MB | fdd890565a1c |
| collection/v2/sources/evtx_attack_samples/Persistence/DACL_DCSync_Right_Powerview_ Add-DomainObjectAcl.evtx | Other | 1.1 MB | 3acc52d1c27a |
| collection/v2/sources/evtx_attack_samples/Persistence/Network_Service_Guest_added_to_admins_4732.evtx | Other | 69.6 KB | 9619b9d9d7bb |
| collection/v2/sources/evtx_attack_samples/Persistence/Persistence_Shime_Microsoft-Windows-Application-Experience_Program-Telemetry_500.evtx | Other | 69.6 KB | f13ef5a54ea8 |
| collection/v2/sources/evtx_attack_samples/Persistence/Persistence_Winsock_Catalog Change EventId_1.evtx | Other | 69.6 KB | c53b6f9d9583 |
| collection/v2/sources/evtx_attack_samples/Persistence/evasion_persis_hidden_run_keyvalue_sysmon_13.evtx | Other | 69.6 KB | b8df8232d917 |
| collection/v2/sources/evtx_attack_samples/Persistence/persist_bitsadmin_Microsoft-Windows-Bits-Client-Operational.evtx | Other | 69.6 KB | c2ed1a0248ab |
| collection/v2/sources/evtx_attack_samples/Persistence/persist_firefox_comhijack_sysmon_11_13_7_1.evtx | Other | 69.6 KB | 5efdbe9d51c0 |
| collection/v2/sources/evtx_attack_samples/Persistence/persist_turla_outlook_backdoor_comhijack.evtx | Other | 69.6 KB | 1a066ced716a |
| collection/v2/sources/evtx_attack_samples/Persistence/persist_valid_account_guest_rid_hijack.evtx | Other | 69.6 KB | 5f482d8f769d |
| collection/v2/sources/evtx_attack_samples/Persistence/persistence_SilentProcessExit_ImageHijack_sysmon_13_1.evtx | Other | 69.6 KB | 37f5121b071d |
| collection/v2/sources/evtx_attack_samples/Persistence/persistence_accessibility_features_osk_sysmon1.evtx | Other | 69.6 KB | 9a99994be7f6 |
| collection/v2/sources/evtx_attack_samples/Persistence/persistence_hidden_local_account_sysmon.evtx | Other | 69.6 KB | c472b0b7808c |
| collection/v2/sources/evtx_attack_samples/Persistence/persistence_pendingGPO_sysmon_13.evtx | Other | 69.6 KB | cf9b918ac583 |
| collection/v2/sources/evtx_attack_samples/Persistence/persistence_security_dcshadow_4742.evtx | Other | 69.6 KB | 524c34f83dd4 |
| collection/v2/sources/evtx_attack_samples/Persistence/persistence_startup_UserShellStartup_Folder_Changed_sysmon_13.evtx | Other | 69.6 KB | 4a6544a5b564 |
| collection/v2/sources/evtx_attack_samples/Persistence/persistence_sysmon_11_13_1_shime_appfix.evtx | Other | 1.1 MB | 799420511f35 |
| collection/v2/sources/evtx_attack_samples/Persistence/sysmon_13_1_persistence_via_winlogon_shell.evtx | Other | 69.6 KB | 78592aa982a4 |
| collection/v2/sources/evtx_attack_samples/Persistence/sysmon_1_persist_bitsjob_SetNotifyCmdLine.evtx | Other | 69.6 KB | f2ac975c8dd1 |
| collection/v2/sources/evtx_attack_samples/Persistence/sysmon_1_smss_child_proc_bootexecute_setupexecute.evtx | Other | 69.6 KB | 29913aef999a |
| collection/v2/sources/evtx_attack_samples/Persistence/sysmon_20_21_1_CommandLineEventConsumer.evtx | Other | 69.6 KB | 136cd2549e49 |
| collection/v2/sources/evtx_attack_samples/Persistence/sysmon_local_account_creation_and_added_admingroup_12_13.evtx | Other | 69.6 KB | 85851f4724cf |
| collection/v2/sources/evtx_attack_samples/Persistence/wmighost_sysmon_20_21_1.evtx | Other | 69.6 KB | 687c5cbe9a91 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/4624 LT3 AnonymousLogon Localhost - JuicyPotato.evtx | Other | 69.6 KB | b058ae02bbed |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/4765_sidhistory_add_t1178.evtx | Other | 69.6 KB | 2e1aadc0097b |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/CVE-2020-0796_SMBV3Ghost_LocalPrivEsc_Sysmon_3_1_10.evtx | Other | 69.6 KB | 58c0e61d14c2 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/EfsPotato_sysmon_17_18_privesc_seimpersonate_to_system.evtx | Other | 69.6 KB | b90b44749a59 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/Invoke_TokenDuplication_UAC_Bypass4624.evtx | Other | 69.6 KB | 8e8a735ccfa2 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/NTLM2SelfRelay-med0x2e-security_4624_4688.evtx | Other | 69.6 KB | 26fd9de9bc19 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/PrivEsc_CVE-2020-1313_Sysmon_13_UScheduler_Cmdline.evtx | Other | 69.6 KB | 278c679da912 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/PrivEsc_Imperson_NetSvc_to_Sys_Decoder_Sysmon_1_17_18.evtx | Other | 69.6 KB | 498ce5682bd5 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/PrivEsc_NetSvc_SessionToken_Retrival_via_localSMB_Auth_5145.evtx | Other | 69.6 KB | 2fe940895252 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/PrivEsc_SeImpersonatePriv_enabled_back_for_upnp_localsvc_4698.evtx | Other | 69.6 KB | d6840c8618b2 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/RogueWinRM.evtx | Other | 69.6 KB | 9b650416ac19 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/Runas_4624_4648_Webshell_CreateProcessAsUserA.evtx | Other | 69.6 KB | 23dc9b171389 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/Sysmon_13_1_UACBypass_SDCLTBypass.evtx | Other | 69.6 KB | 343bf81c3dbf |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/Sysmon_13_1_UAC_Bypass_EventVwrBypass.evtx | Other | 69.6 KB | d4abc83c9668 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/Sysmon_UACME_22.evtx | Other | 69.6 KB | 45f90c35f977 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/Sysmon_UACME_23.evtx | Other | 69.6 KB | c742e7767e11 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/Sysmon_UACME_30.evtx | Other | 69.6 KB | 044ee159b0b9 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/Sysmon_UACME_32.evtx | Other | 69.6 KB | 3729a7b63978 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/Sysmon_UACME_33.evtx | Other | 69.6 KB | 369fe7264d8d |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/Sysmon_UACME_34.evtx | Other | 69.6 KB | d3b277e1165e |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/Sysmon_UACME_36_FileCreate.evtx | Other | 69.6 KB | a84ee8dd4a45 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/Sysmon_UACME_37_FileCreate.evtx | Other | 69.6 KB | 0b3893de16d5 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/Sysmon_UACME_38.evtx | Other | 69.6 KB | 42075b5afd43 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/Sysmon_UACME_39.evtx | Other | 69.6 KB | 85c32ce26cbd |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/Sysmon_UACME_41.evtx | Other | 69.6 KB | 10607601e5ab |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/Sysmon_UACME_43.evtx | Other | 69.6 KB | 47bdaa367dfa |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/Sysmon_UACME_45.evtx | Other | 69.6 KB | aae67b99a0b4 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/Sysmon_UACME_53.evtx | Other | 69.6 KB | 3a6f512f47e0 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/Sysmon_UACME_54.evtx | Other | 69.6 KB | 90fa9a2b3bdd |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/Sysmon_UACME_56.evtx | Other | 69.6 KB | a1f83d418938 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/Sysmon_UACME_63.evtx | Other | 69.6 KB | 5cbfc3e5c3df |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/Sysmon_UACME_64.evtx | Other | 1.1 MB | b1a47437b309 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/Sysmon_uacme_58.evtx | Other | 69.6 KB | 40e37fb256e2 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/System_7045_namedpipe_privesc.evtx | Other | 69.6 KB | 21a62694861b |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/UACME_59_Sysmon.evtx | Other | 69.6 KB | 1de377518014 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/UACME_61_Changepk.evtx | Other | 69.6 KB | 65fe36818330 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/eop_appcontainer_il_broker_filewrite.evtx | Other | 69.6 KB | 3175fc1489e8 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/privesc_KrbRelayUp_windows_4624.evtx | Other | 69.6 KB | f8c7ee23333b |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/privesc_registry_symlink_CVE-2020-1377.evtx | Other | 69.6 KB | f273b368f752 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/privesc_roguepotato_sysmon_17_18.evtx | Other | 69.6 KB | 21bcc12aed93 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/privesc_rotten_potato_from_webshell_metasploit_sysmon_1_8_3.evtx | Other | 69.6 KB | 03d1d202bdf5 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/privesc_seimpersonate_tosys_spoolsv_sysmon_17_18.evtx | Other | 69.6 KB | 868533829b97 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/privesc_spoolfool_mahdihtm_sysmon_1_11_7_13.evtx | Other | 69.6 KB | 9457cdfd5159 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/privesc_spoolsv_spl_file_write_sysmon11.evtx | Other | 69.6 KB | 44c56f764719 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/privesc_sysmon_cve_20201030_spooler.evtx | Other | 69.6 KB | c220b523b3b7 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/privesc_unquoted_svc_sysmon_1_11.evtx | Other | 1.1 MB | 5b3bd618ff21 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/privexchange_dirkjan.evtx | Other | 69.6 KB | 321c68c4f41b |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/samaccount_spoofing_CVE-2021-42287_CVE-2021-42278_DC_securitylogs.evtx | Other | 69.6 KB | d3cf4940a040 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/security_4624_4673_token_manip.evtx | Other | 69.6 KB | 2546b0885120 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/sysmon_11_1_15_WScriptBypassUAC.evtx | Other | 69.6 KB | 48f65d146e64 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/sysmon_11_1_7_uacbypass_cliconfg.evtx | Other | 69.6 KB | 08d994196edc |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/sysmon_11_7_1_uacbypass_windirectory_mocking.evtx | Other | 69.6 KB | d75d688bd1df |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/sysmon_13_1_12_11_perfmonUACBypass.evtx | Other | 69.6 KB | 7a0312bce23c |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/sysmon_13_1_compmgmtlauncherUACBypass.evtx | Other | 69.6 KB | 2bf934cb66f8 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/sysmon_13_1_meterpreter_getsystem_NamedPipeImpersonation.evtx | Other | 69.6 KB | 9e1fbb0604db |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/sysmon_1_11_exec_as_system_via_schedtask.evtx | Other | 69.6 KB | 6b2ae54c6e39 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/sysmon_1_13_11_cmstp_ini_uacbypass.evtx | Other | 69.6 KB | 6a49ee4d01b1 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/sysmon_1_13_UACBypass_AppPath_Control.evtx | Other | 69.6 KB | 8296ad4d09de |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/sysmon_1_7_11_mcx2prov_uacbypass.evtx | Other | 69.6 KB | 2a6fdd4c4c3b |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/sysmon_1_7_11_migwiz.evtx | Other | 69.6 KB | 83b13ff4ae16 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/sysmon_1_7_11_sysprep_uacbypass.evtx | Other | 69.6 KB | 230e09d306b1 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/sysmon_1_7_elevate_uacbypass_sysprep.evtx | Other | 69.6 KB | 199b9686cf89 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/sysmon_privesc_from_admin_to_system_handle_inheritance.evtx | Other | 69.6 KB | 0e6a64e50207 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/sysmon_privesc_psexec_dwell.evtx | Other | 69.6 KB | a79a14dcaac1 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/sysmon_uacbypass_CDSSync_schtask_hijack_byeintegrity5.evtx | Other | 69.6 KB | 6265ba7f12b8 |
| collection/v2/sources/evtx_attack_samples/Privilege Escalation/win10_4703_SeDebugPrivilege_enabled.evtx | Other | 69.6 KB | df34b4db3dae |
| collection/v2/sources/evtx_attack_samples/UACME_59_Sysmon.evtx | Other | 69.6 KB | 1de377518014 |
| collection/v2/sources/evtx_attack_samples/Winlogbeat-Bulk-Read.ps1 | Other | 5.5 KB | a89928754840 |
| collection/v2/sources/evtx_attack_samples/mitre_evtx_repo_map.png | Other | 168.3 KB | f49714614ff9 |
| collection/v2/sources/evtx_attack_samples/temp-plot.html | Other | 3.6 MB | b982fab0470b |
| collection/v2/sources/evtx_attack_samples/winlogbeat_example.yml | Other | 774 B | c67a1f0981e2 |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDAWS-200914011940.yaml | Other | 2.9 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDAWS-2202181000.yaml | Other | 1.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDLIN-201110074812.yaml | Other | 1.1 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDLIN-201110081941.yaml | Other | 1.4 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190301125905.yaml | Other | 6.2 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190301174830.yaml | Other | 7.6 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190319020147.yaml | Other | 2.1 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190319020729.yaml | Other | 2.0 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190319021158.yaml | Other | 2.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190319023812.yaml | Other | 8.4 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190319024742.yaml | Other | 6.9 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190319131123.yaml | Other | 5.4 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190319145126.yaml | Other | 5.3 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190403133337.yaml | Other | 6.7 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190518182022.yaml | Other | 4.1 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190518184306.yaml | Other | 6.7 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190518200432.yaml | Other | 6.6 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190518201207.yaml | Other | 3.1 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190518201922.yaml | Other | 1.2 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190518202151.yaml | Other | 16.4 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190518203650.yaml | Other | 2.1 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190518210125.yaml | Other | 8.1 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190518210652.yaml | Other | 7.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190518211052.yaml | Other | 6.6 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190518211456.yaml | Other | 7.3 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190518213907.yaml | Other | 8.8 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190518221344.yaml | Other | 24.9 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190518224039.yaml | Other | 2.4 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190518230752.yaml | Other | 3.9 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190518235535.yaml | Other | 4.9 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190519005224.yaml | Other | 3.6 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190625103712.yaml | Other | 5.6 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-190625133822.yaml | Other | 1.7 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-191027055035.yaml | Other | 1.2 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-191027223020.yaml | Other | 1.2 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-191225045202.yaml | Other | 4.2 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200609225055.yaml | Other | 2.4 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200721232741.yaml | Other | 4.3 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200722001847.yaml | Other | 6.3 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200724174200.yaml | Other | 1.3 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200805020926.yaml | Other | 4.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200805034820.yaml | Other | 1.2 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200806012009.yaml | Other | 1.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200806015757.yaml | Other | 1.3 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200806022635.yaml | Other | 1.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200806030120.yaml | Other | 1.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200806031938.yaml | Other | 1.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200806035621.yaml | Other | 1.6 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200806115603.yaml | Other | 3.7 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200806130039.yaml | Other | 2.6 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200807103913.yaml | Other | 3.8 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200904032946.yaml | Other | 6.4 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200914080546.yaml | Other | 2.7 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200916232559.yaml | Other | 3.7 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200917174542.yaml | Other | 1.6 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200918145959.yaml | Other | 1.4 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200921001437.yaml | Other | 7.9 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200921175806.yaml | Other | 8.8 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200921230246.yaml | Other | 5.0 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-200922042230.yaml | Other | 3.1 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201009173318.yaml | Other | 1.8 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201009183000.yaml | Other | 1.9 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201012183248.yaml | Other | 1.6 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201017061100.yaml | Other | 1.3 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201018195009.yaml | Other | 1.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201018225619.yaml | Other | 2.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201019002900.yaml | Other | 2.1 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201019033054.yaml | Other | 1.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201019224718.yaml | Other | 1.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201019232515.yaml | Other | 1.4 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201020013208.yaml | Other | 1.6 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201021001911.yaml | Other | 1.3 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201021204544.yaml | Other | 1.2 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201021232814.yaml | Other | 1.3 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201022002145.yaml | Other | 1.3 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201022013121.yaml | Other | 1.3 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201022015432.yaml | Other | 1.4 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201022022144.yaml | Other | 1.4 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201022025808.yaml | Other | 1.3 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201022035214.yaml | Other | 1.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201022042947.yaml | Other | 5.4 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201023020513.yaml | Other | 1.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201023023651.yaml | Other | 1.4 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201023031210.yaml | Other | 1.9 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201026235835.yaml | Other | 2.2 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201028191914.yaml | Other | 2.6 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201029001615.yaml | Other | 1.4 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201029202324.yaml | Other | 2.3 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201102041306.yaml | Other | 970 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201102163918.yaml | Other | 22.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201219070027.yaml | Other | 1.6 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-201219075059.yaml | Other | 10.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-210314014019.yaml | Other | 2.1 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-210427020247.yaml | Other | 1.6 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-210611210814.yaml | Other | 4.1 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-220630130349.yaml | Other | 2.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-220703123711.yaml | Other | 3.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-220705170038.yaml | Other | 3.1 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-220708104215.yaml | Other | 4.7 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-220708104300.yaml | Other | 6.0 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-220803205800.yaml | Other | 5.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-230718150800.yaml | Other | 2.3 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-230718151900.yaml | Other | 2.8 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/_metadata/SDWIN-230720004300.yaml | Other | 6.0 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/atomic/windows/discovery/network/covenant_ldap_searchrequest_domainuser.cap | Other | 440.3 KB | 34dc73fb1d1f |
| collection/v2/sources/mordor_security_datasets/datasets/compound/_metadata/GoldenSAMLADFSMailAccess.yaml | Other | 1.8 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/_metadata/LSASS_campaign_01.yaml | Other | 32.7 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/_metadata/LSASS_campaign_02.yaml | Other | 30.6 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/_metadata/LSASS_campaign_03.yaml | Other | 45.7 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/_metadata/LSASS_campaign_04.yaml | Other | 34.1 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/_metadata/LSASS_campaign_05.yaml | Other | 47.8 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/_metadata/LSASS_campaign_06.yaml | Other | 38.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/_metadata/LSASS_campaign_07.yaml | Other | 33.2 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/_metadata/Log4Shell.yaml | Other | 3.0 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/combined_zeek.log | Other | 1.2 MB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/NASHUA_conn.log | Other | 233.9 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/NASHUA_dce_rpc.log | Other | 17.2 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/NASHUA_dns.log | Other | 9.6 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/NASHUA_dpd.log | Other | 2.0 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/NASHUA_files.log | Other | 189.1 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/NASHUA_kerberos.log | Other | 4.3 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/NASHUA_notice.log | Other | 560 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/NASHUA_smb_files.log | Other | 3.1 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/NASHUA_smb_mapping.log | Other | 1.3 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/NASHUA_ssl.log | Other | 316.3 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/NASHUA_weird.log | Other | 991 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/NASHUA_x509.log | Other | 270.2 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/SCRANTON_conn.log | Other | 64.4 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/SCRANTON_dce_rpc.log | Other | 20.8 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/SCRANTON_dns.log | Other | 15.8 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/SCRANTON_dpd.log | Other | 2.1 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/SCRANTON_files.log | Other | 35.2 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/SCRANTON_http.log | Other | 39.3 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/SCRANTON_kerberos.log | Other | 7.6 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/SCRANTON_notice.log | Other | 557 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/SCRANTON_pe.log | Other | 472 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/SCRANTON_smb_files.log | Other | 3.2 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/SCRANTON_smb_mapping.log | Other | 1.6 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/SCRANTON_ssl.log | Other | 1.6 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/SCRANTON_weird.log | Other | 1.2 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day1/zeek/individual_zeek_logs/SCRANTON_x509.log | Other | 1.4 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/combined_zeek.log | Other | 1.5 MB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/NEWYORK_capture_loss.log | Other | 368 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/NEWYORK_conn.log | Other | 147.2 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/NEWYORK_dce_rpc.log | Other | 78.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/NEWYORK_dns.log | Other | 75.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/NEWYORK_kerberos.log | Other | 20.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/NEWYORK_loaded_scripts.log | Other | 64.8 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/NEWYORK_packet_filter.log | Other | 152 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/NEWYORK_reporter.log | Other | 2.1 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/NEWYORK_smb_files.log | Other | 4.4 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/NEWYORK_smb_mapping.log | Other | 4.0 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/NEWYORK_stats.log | Other | 2.9 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/NEWYORK_weird.log | Other | 3.0 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/SCRANTON_capture_loss.log | Other | 336 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/SCRANTON_conn.log | Other | 24.7 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/SCRANTON_dce_rpc.log | Other | 10.2 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/SCRANTON_dns.log | Other | 8.7 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/SCRANTON_kerberos.log | Other | 3.3 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/SCRANTON_loaded_scripts.log | Other | 64.8 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/SCRANTON_packet_filter.log | Other | 152 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/SCRANTON_reporter.log | Other | 1.9 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/SCRANTON_smb_mapping.log | Other | 743 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/SCRANTON_stats.log | Other | 1.9 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/SCRANTON_weird.log | Other | 528 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-A_capture_loss.log | Other | 185 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-A_conn.log | Other | 168.0 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-A_dce_rpc.log | Other | 17.2 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-A_dns.log | Other | 27.9 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-A_files.log | Other | 1.6 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-A_http.log | Other | 486 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-A_kerberos.log | Other | 2.8 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-A_loaded_scripts.log | Other | 64.8 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-A_notice.log | Other | 510 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-A_packet_filter.log | Other | 152 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-A_pe.log | Other | 479 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-A_reporter.log | Other | 3.3 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-A_smb_mapping.log | Other | 740 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-A_ssl.log | Other | 105.9 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-A_stats.log | Other | 1.4 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-A_weird.log | Other | 923 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-A_x509.log | Other | 1.2 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-C_capture_loss.log | Other | 183 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-C_conn.log | Other | 14.8 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-C_dns.log | Other | 579 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-C_kerberos.log | Other | 189 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-C_loaded_scripts.log | Other | 64.8 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-C_packet_filter.log | Other | 152 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-C_reporter.log | Other | 1.7 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-C_smb_mapping.log | Other | 253 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-C_ssl.log | Other | 10.8 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-C_stats.log | Other | 465 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-C_weird.log | Other | 263 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-D_capture_loss.log | Other | 184 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-D_conn.log | Other | 169.9 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-D_dce_rpc.log | Other | 6.8 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-D_dns.log | Other | 7.1 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-D_kerberos.log | Other | 1.2 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-D_loaded_scripts.log | Other | 64.8 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-D_packet_filter.log | Other | 152 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-D_reporter.log | Other | 1.7 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-D_ssl.log | Other | 117.1 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-D_stats.log | Other | 950 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-D_weird.log | Other | 262 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-ONE-DRIVE_capture_loss.log | Other | 169 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-ONE-DRIVE_conn.log | Other | 30.5 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-ONE-DRIVE_dns.log | Other | 3.3 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-ONE-DRIVE_files.log | Other | 15.7 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-ONE-DRIVE_loaded_scripts.log | Other | 64.8 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-ONE-DRIVE_packet_filter.log | Other | 152 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-ONE-DRIVE_reporter.log | Other | 1.7 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-ONE-DRIVE_ssl.log | Other | 26.0 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-ONE-DRIVE_stats.log | Other | 466 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-ONE-DRIVE_weird.log | Other | 133 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/day2/zeek/individual_zeek_logs/UTICA-ONE-DRIVE_x509.log | Other | 17.0 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/apt29/emulationplans/apt29.xlsx | Other | 25.1 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/docker-compose-empire.yml | Other | 503 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/11.A.0-listener.rc | Other | 114 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/11.A.1-scripting_stager_vbs.rc | Other | 100 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/12.A.1-system_network_config_discovery.rc | Other | 18 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/12.A.2-system_network_config_discovery.rc | Other | 20 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/12.B.1-system_owner_user_discovery.rc | Other | 27 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/12.C.1-process_discovery.rc | Other | 17 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/12.D.1-system_service_discovery.rc | Other | 16 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/12.E.1-scripting_winenum.rc | Other | 53 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/12.F.1-permission_groups_discovery.rc | Other | 40 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/12.F.2-permission_groups_discovery.rc | Other | 38 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/12.G.1-account_discovery.rc | Other | 15 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/12.G.2-account_discovery.rc | Other | 23 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/13.A.1-remote_system_discovery.rc | Other | 43 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/13.B.1-system_network_connections_discovery.rc | Other | 14 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/13.B.2-system_network_connections_discovery.rc | Other | 19 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/13.C.1-query_registry.rc | Other | 107 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/14.A.1.1-bypassuac_stager.rc | Other | 90 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/14.A.1.2-bypassuac_token.rc | Other | 118 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/14.A.2.2-privesc_ask.rc | Other | 49 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/15.A.1-credential_access_keylogger.rc | Other | 39 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/15.B.1-credentials_in_file.rc | Other | 43 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/16.A.1-passwords_spray.rc | Other | 53 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/16.B.1-windows_admin_shares_mount.rc | Other | 61 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/16.C1-network_share_conection_removal.rc | Other | 40 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/16.D.1-windows_admin_shares_mount_dc.rc | Other | 57 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/16.E.1-remote_file_copy_stager.rc | Other | 27 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/16.F.1-command_line_interface.rc | Other | 179 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/16.G.1-remote_file_copy.rc | Other | 127 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/16.H.1-system_service_discovery.rc | Other | 30 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/16.I.1-new_service.rc | Other | 210 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/16.J.1-system_service_discovery.rc | Other | 40 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/16.K.1-file_and_directory_discovery.rc | Other | 90 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/16.L.1-service_execution.rc | Other | 43 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/17.A.1-query_registry.rc | Other | 86 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/17.B.1-file_permissions_modification.rc | Other | 53 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/17.B.2-file_permissions_modification.rc | Other | 85 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/17.C.1-accessibility_features.rc | Other | 71 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/18.A.1-file_and_directory_discovery.rc | Other | 39 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/18.B.1-data_staged.rc | Other | 68 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/19.A.1-remote_file_copy.rc | Other | 25 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/19.B.1-data_compressed.rc | Other | 80 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/19.C.1-exfiltration_over_alternative_protocol.rc | Other | 68 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/19.D.1-file_deletion.rc | Other | 35 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/resource_files/19.D.2-file_deletion.rc | Other | 23 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/scripts/ftp_server_start.py | Other | 678 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/scripts/invoke-runas-cmd.ps1 | Other | 2.1 KB | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/scripts/recycler.exe | Other | 739.8 KB | 86d0532eebfb |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/environment/empire/scripts/share_spraying.ps1 | Other | 901 B | — |
| collection/v2/sources/mordor_security_datasets/datasets/compound/windows/apt3/scope/apt3_mordor_playbook.xlsx | Other | 83.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/TEMPLATE.yml | Other | 442 B | — |
| collection/v2/sources/splunk_attack_data/datasets/apt_simulations/ActiveMQ_exploit_Lockbit_Ransomware/activemq_exploit_lockbit_ransomware.yml | Other | 962 B | — |
| collection/v2/sources/splunk_attack_data/datasets/apt_simulations/ActiveMQ_exploit_Lockbit_Ransomware/windows-powershell.log | Other | 57.1 MB | 405c2a15b183 |
| collection/v2/sources/splunk_attack_data/datasets/apt_simulations/ActiveMQ_exploit_Lockbit_Ransomware/windows-security.log | Other | 21.5 MB | 55555312391c |
| collection/v2/sources/splunk_attack_data/datasets/apt_simulations/ActiveMQ_exploit_Lockbit_Ransomware/windows-sysmon.log | Other | 20.7 MB | 6fb7acc46cae |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1001/snapattack/snapattack.log | Other | 1.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1001/snapattack/snapattack.yml | Other | 424 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.001/atomic_red_team/atomic_red_team.yml | Other | 1.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.001/atomic_red_team/createdump_windows-sysmon.log | Other | 10.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.001/atomic_red_team/crowdstrike_falcon.log | Other | 77.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.001/atomic_red_team/procdump_windows-security.log | Other | 14.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.001/atomic_red_team/windows-powershell.log | Other | 8.6 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.001/atomic_red_team/windows-security.log | Other | 8.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.001/atomic_red_team/windows-sysmon.log | Other | 14.2 MB | a1905850598f |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.001/atomic_red_team/windows-sysmon_creddump.log | Other | 65.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.001/atomic_red_team/windows-system.log | Other | 392.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.001/snapattack/snapattack.log | Other | 58.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.001/snapattack/snapattack.yml | Other | 478 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.002/atomic_red_team/atomic_red_team.yml | Other | 802 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.002/atomic_red_team/copy-powershell.log | Other | 23.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.002/atomic_red_team/crowdstrike_falcon.log | Other | 8.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.002/atomic_red_team/windows-powershell.log | Other | 8.9 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.002/atomic_red_team/windows-security.log | Other | 259.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.002/atomic_red_team/windows-security_ssa.log | Other | 4.1 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.002/atomic_red_team/windows-sysmon.log | Other | 12.8 MB | ae66c083bde9 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.002/atomic_red_team/windows-system.log | Other | 390.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.002/detect_copy_of_shadowcopy_with_script_block_logging/data.yml | Other | 571 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.002/detect_copy_of_shadowcopy_with_script_block_logging/windows-xml.log | Other | 34.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.002/serioussam/serioussam.yml | Other | 488 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.002/serioussam/windows-powershell.log | Other | 11.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.002/serioussam/windows-security.log | Other | 2.6 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.002/serioussam/windows-xml.log | Other | 2.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.002/snapattack/snapattack.log | Other | 7.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.002/snapattack/snapattack.yml | Other | 478 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.003/atomic_red_team/4688_windows-security.log | Other | 11.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.003/atomic_red_team/atomic_red_team.yml | Other | 1.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.003/atomic_red_team/crowdstrike_falcon.log | Other | 10.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.003/atomic_red_team/windows-powershell.log | Other | 8.5 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.003/atomic_red_team/windows-sec-events.log | Other | 3.5 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.003/atomic_red_team/windows-security.log | Other | 5.2 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.003/atomic_red_team/windows-sysmon.log | Other | 12.9 MB | ee1c7cd9fa20 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.003/atomic_red_team/windows-system.log | Other | 389.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.003/snapattack/snapattack.log | Other | 7.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.003/snapattack/snapattack.yml | Other | 467 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.004/NoLMHash/NoLMHash.yml | Other | 449 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.004/NoLMHash/lsa-reg-settings-sysmon.log | Other | 4.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.004/snapattack/snapattack.log | Other | 4.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.004/snapattack/snapattack.yml | Other | 452 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.005/snapattack/snapattack.log | Other | 1.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.005/snapattack/snapattack.yml | Other | 450 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.006/impacket/impacket.yml | Other | 481 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.006/impacket/windows-directory_service.log | Other | 1.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.006/impacket/windows-security-xml.log | Other | 10.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.006/impacket/windows-security.log | Other | 5.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.006/impacket/zeek-dce_rpc.log | Other | 495 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.006/mimikatz/mimikatz.yml | Other | 398 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.006/mimikatz/windows-directory_service.log | Other | 913 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.006/mimikatz/windows-security.log | Other | 5.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.006/mimikatz/xml-windows-security.log | Other | 16.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.006/mimikatz/zeek-dce_rpc.log | Other | 248 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.006/snapattack/snapattack.log | Other | 3.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.006/snapattack/snapattack.yml | Other | 420 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.008/copy_file_stdoutpipe/copy_file_stdoutpipe.yml | Other | 433 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.008/copy_file_stdoutpipe/sysmon_linux.log | Other | 11.1 MB | c18efef784e7 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.008/esxi_sensitive_files/esxi_sensitive_files.log | Other | 1.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.008/esxi_sensitive_files/esxi_sensitive_files.yml | Other | 461 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.008/linux_auditd_access_credential/auditd_proctitle_access_cred.log | Other | 8.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.008/linux_auditd_access_credential/linux_auditd_access_credential.log | Other | 1.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003.008/linux_auditd_access_credential/linux_auditd_access_credential.yml | Other | 661 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003/credential_extraction/credential_extraction.yml | Other | 554 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003/credential_extraction/logAllDSInternalsModules.log | Other | 3.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003/credential_extraction/logAllMimikatzModules.log | Other | 21.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003/credential_extraction/logAllPowerSploitModulesWithOldNames.log | Other | 10.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003/credential_extraction/logFgdump.log | Other | 4.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003/credential_extraction/logLazagneCredDump.log | Other | 36.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003/credential_extraction/logLiveKDFullKernelDump.log | Other | 32.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003/credential_extraction/logPowerShellModule.log | Other | 2.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003/credential_extraction/mimikatzwindows-sysmon.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003/snapattack/snapattack.log | Other | 1.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003/snapattack/snapattack.yml | Other | 417 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003/wdigest_enable/sysmon.log | Other | 6.2 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1003/wdigest_enable/wdigest_enable.yml | Other | 396 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1005/esxi_vm_download/esxi_vm_download.log | Other | 271 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1005/esxi_vm_download/esxi_vm_download.yml | Other | 425 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1006/snapattack/snapattack.log | Other | 2.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1006/snapattack/snapattack.yml | Other | 444 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1011/snapattack/snapattack.log | Other | 3.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1011/snapattack/snapattack.yml | Other | 474 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1012/backup_product_key_registry/backup_product_key_registry.yml | Other | 465 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1012/backup_product_key_registry/backup_protection.log | Other | 1.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1012/host_file_accessed/host_file_accessed.yml | Other | 432 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1012/host_file_accessed/hosts_accessed.log | Other | 15.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1012/snapattack/snapattack.log | Other | 1.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1012/snapattack/snapattack.yml | Other | 480 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1014/T1014.yml | Other | 532 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1014/medusa_rootkit/medusa.yml | Other | 399 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1014/medusa_rootkit/sysmon_linux.log | Other | 6.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1014/snapattack/snapattack.yml | Other | 461 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1014/snapattack/snapattack_linux.log | Other | 950 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1014/windows-security.log | Other | 39.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1014/windows-sysmon.log | Other | 204.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1014/windows-system.log | Other | 9.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1016.001/snapattack/snapattack.log | Other | 5.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1016.001/snapattack/snapattack.yml | Other | 446 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1016/atomic_red_team/linux_net_discovery/linux_net_discovery.yml | Other | 438 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1016/atomic_red_team/linux_net_discovery/sysmon_linux.log | Other | 18.2 MB | 62d24162917c |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1016/atomic_red_team/macos_net_discovery/macos_list_firewall_rules.log | Other | 8.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1016/atomic_red_team/macos_net_discovery/macos_net_discovery.yml | Other | 593 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1016/atomic_red_team/macos_net_discovery/macos_network_discovery.log | Other | 5.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1016/discovery_commands/discovery_commands.yml | Other | 431 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1016/discovery_commands/windows-powershell.log | Other | 8.5 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1016/discovery_commands/windows-security.log | Other | 5.7 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1016/discovery_commands/windows-sysmon.log | Other | 14.6 MB | 90330baf0655 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1016/discovery_commands/windows-system.log | Other | 289.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1016/linux_auditd_net_tool/linux_auditd_net_tool.log | Other | 12.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1016/linux_auditd_net_tool/linux_auditd_net_tool.yml | Other | 423 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1016/linux_auditd_net_tool_new/linux_auditd_net_tool_bucket_new.log | Other | 265.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1016/linux_auditd_net_tool_new/linux_auditd_net_tool_new.yml | Other | 457 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1018/AD_discovery/AD_discovery.yml | Other | 435 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1018/AD_discovery/windows-powershell.log | Other | 6.4 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1018/AD_discovery/windows-security.log | Other | 330.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1018/AD_discovery/windows-sysmon.log | Other | 4.9 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1018/atomic_red_team/atomic_red_team.yml | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1018/atomic_red_team/windows-powershell.log | Other | 10.4 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1018/atomic_red_team/windows-security.log | Other | 16.4 MB | 98d7d85b324d |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1018/atomic_red_team/windows-sysmon.log | Other | 51.7 MB | 0eeaa25cc569 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1018/atomic_red_team/windows-system.log | Other | 2.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1018/constrained/powerview_old.yml | Other | 415 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1018/constrained/windows-powershell.log | Other | 272.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1018/unconstrained/powerview_old.yml | Other | 418 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1018/unconstrained/windows-powershell.log | Other | 359.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1018/unconstrained2/getadcomputer_old.yml | Other | 424 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1018/unconstrained2/windows-powershell.log | Other | 12.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1018/windows_get_adcomputer_unconstrained_delegation_discovery/data.yml | Other | 581 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1018/windows_get_adcomputer_unconstrained_delegation_discovery/windows-xml.log | Other | 942 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1018/windows_powerview_constrained_delegation_discovery/data.yml | Other | 560 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1018/windows_powerview_constrained_delegation_discovery/windows-xml.log | Other | 1.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1020/T1020.yml | Other | 408 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1020/snapattack/snapattack.log | Other | 2.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1020/snapattack/snapattack.yml | Other | 433 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1020/windows-security.log | Other | 31.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1020/windows-sysmon.log | Other | 9.1 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.001/bmc_creation/bmc_creation.log | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.001/bmc_creation/bmc_creation.yml | Other | 442 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.001/execution_from_rdp_share/execution_from_rdp_share.log | Other | 11.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.001/execution_from_rdp_share/execution_from_rdp_share.yml | Other | 509 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.001/mstsc_admini/mstsc_admin.log | Other | 19.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.001/mstsc_admini/mstsc_admini.yml | Other | 442 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.001/mstsc_rdp_cmd/mstsc_rdp_cmd.yml | Other | 442 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.001/mstsc_rdp_cmd/mstsc_sysmon.log | Other | 9.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.001/rdp_creation/deafault_rdp_created.log | Other | 1.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.001/rdp_creation/rdp_creation.yml | Other | 442 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.001/rdp_session_established/4624_10_logon.log | Other | 29.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.001/rdp_session_established/rdp_session_established.yml | Other | 448 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.001/remote_desktop_connection/remote_desktop_connection.yml | Other | 371 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.001/remote_desktop_connection/zeek_conn.log | Other | 471 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.001/susp_default_rdp_creation/default_rdp.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.001/susp_default_rdp_creation/default_rdp_dropped.log | Other | 10.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.001/susp_default_rdp_creation/susp_default_rdp_creation.yml | Other | 499 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.001/terminal_server_reg_created/terminal_server_reg_created.yml | Other | 487 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.001/terminal_server_reg_created/terminal_sever_client_Reg_created.log | Other | 8.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.001/unhide_file/unhide_file.log | Other | 24.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.001/unhide_file/unhide_file.yml | Other | 439 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.002/atomic_red_team/4688_smbexec_windows-security.log | Other | 1.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.002/atomic_red_team/4688_wmiexec_windows-security.log | Other | 9.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.002/atomic_red_team/atomic_red_team.yml | Other | 2.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.002/atomic_red_team/firewall-powershell.log | Other | 2.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.002/atomic_red_team/smbexec_windows-sysmon.log | Other | 5.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.002/atomic_red_team/windows-powershell.log | Other | 8.9 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.002/atomic_red_team/windows-security-xml.log | Other | 72.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.002/atomic_red_team/windows-security.log | Other | 6.4 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.002/atomic_red_team/windows-sysmon.log | Other | 21.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.002/atomic_red_team/windows-system.log | Other | 382.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.002/atomic_red_team/wmiexec_windows-sysmon.log | Other | 19.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.002/executable_in_share/executable_in_share.yml | Other | 410 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.002/executable_in_share/windows_security_xml.log | Other | 2.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.002/impacket_smbexec/impacket_smbexec.yml | Other | 397 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.002/impacket_smbexec/windows_security_xml.log | Other | 3.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.002/impacket_wmiexec/impacket_wmiexec.yml | Other | 397 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.002/impacket_wmiexec/windows_security_xml.log | Other | 7.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.002/snapattack/snapattack.log | Other | 4.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.002/snapattack/snapattack.yml | Other | 470 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.003/excel_activemicrosoftapp/excel_activemicrosoftapp.yml | Other | 492 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.003/excel_activemicrosoftapp/sysmon_winprojexe.log | Other | 11.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.003/impacket/impacket.yml | Other | 524 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.003/impacket/windows-security.log | Other | 549.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.003/impacket/windows-sysmon.log | Other | 5.5 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.003/lateral_movement/lateral_movement.yml | Other | 934 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.003/lateral_movement/windows-powershell-xml.log | Other | 5.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.003/lateral_movement/windows-powershell.log | Other | 8.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.003/lateral_movement/windows-sysmon.log | Other | 6.7 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.003/lateral_movement/windows_security_xml.log | Other | 1.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.003/lateral_movement_lolbas/lateral_movement_lolbas.yml | Other | 552 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.003/lateral_movement_lolbas/windows-security.log | Other | 468.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.003/lateral_movement_lolbas/windows-sysmon.log | Other | 5.5 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.003/lateral_movement_speechruntime/lateral_movement_speechruntime.yml | Other | 571 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.003/lateral_movement_speechruntime/windows-sysmon.log | Other | 6.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.004/atomic_red_team/atomic_red_team.yml | Other | 400 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.004/atomic_red_team/linux-sysmon.log | Other | 1.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.004/esxi_ssh_enabled/esxi_ssh_enabled.log | Other | 1.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.004/esxi_ssh_enabled/esxi_ssh_enabled.yml | Other | 416 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.004/snapattack/snapattack.log | Other | 1.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.004/snapattack/snapattack.yml | Other | 589 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.004/snapattack/snapattack_linux.log | Other | 1.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.006/compmgtm_access/compmgmt_load.log | Other | 4.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.006/compmgtm_access/compmgtm_access.yml | Other | 449 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.006/lateral_movement/lateral_movement.yml | Other | 543 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.006/lateral_movement/windows-security.log | Other | 628.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.006/lateral_movement/windows-sysmon.log | Other | 5.8 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.006/lateral_movement_lolbas/lateral_movement_lolbas.yml | Other | 583 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.006/lateral_movement_lolbas/windows-security.log | Other | 568.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.006/lateral_movement_lolbas/windows-sysmon.log | Other | 6.6 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.006/lateral_movement_psh/lateral_movement_psh.yml | Other | 788 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.006/lateral_movement_psh/windows-powershell-xml.log | Other | 5.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.006/lateral_movement_psh/windows-powershell.log | Other | 14.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.006/lateral_movement_psh/windows-security.log | Other | 439.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.006/lateral_movement_psh/windows-sysmon.log | Other | 6.1 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.006/lateral_movement_pssession/lateral_movement_pssession.yml | Other | 586 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.006/lateral_movement_pssession/windows-powershell-xml.log | Other | 5.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.006/lateral_movement_pssession/windows-powershell.log | Other | 65.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.006/wirm_execute_shell/winrshost_pwh.log | Other | 1.2 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.006/wirm_execute_shell/wirm_execute_shell.yml | Other | 458 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.006/wsman_trustedhost/wsman_pwh.log | Other | 988 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021.006/wsman_trustedhost/wsman_trustedhost.yml | Other | 447 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021/allow_inbound_traffic_in_firewall_rule/data.yml | Other | 524 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021/allow_inbound_traffic_in_firewall_rule/windows-xml.log | Other | 1.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021/esxi_shell_enabled/esxi_shell_enabled.log | Other | 487 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021/esxi_shell_enabled/esxi_shell_enabled.yml | Other | 417 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021/illegal_access_to_content/illegal_access_to_content_old.yml | Other | 539 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021/illegal_access_to_content/logAllPowerSploitModulesWithOldNames.log | Other | 10.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021/snapattack/snapattack.log | Other | 7.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1021/snapattack/snapattack.yml | Other | 422 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1022/snapattack/snapattack.log | Other | 1.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1022/snapattack/snapattack.yml | Other | 462 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027.006/splunk/splunk_http_response_splitting_via_rest_spl_command.log | Other | 21.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027.009/snapattack/snapattack.log | Other | 1.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027.009/snapattack/snapattack.yml | Other | 440 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027.010/manual_b64_decode_pwsh/manual_b64_decode_pwsh.log | Other | 28.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027.010/manual_b64_decode_pwsh/manual_b64_decode_pwsh.yml | Other | 514 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027.010/snapattack/snapattack.log | Other | 5.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027.010/snapattack/snapattack.yml | Other | 458 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027.011/njrat_fileless_registry_entry/njrat_fileless_registry_entry_old.yml | Other | 509 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027.011/njrat_fileless_registry_entry/njrat_registry.log | Other | 1.7 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027.013/rar_sfx_execution/rar_sfx.log | Other | 2.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027.013/rar_sfx_execution/rar_sfx_execution_old.yml | Other | 523 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027/FuckThatPacker/FuckThatPacker.yml | Other | 770 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027/FuckThatPacker/aurora-edr.log | Other | 600.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027/FuckThatPacker/windows-powershell.log | Other | 10.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027/atomic_red_team/atomic_red_team.yml | Other | 639 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027/atomic_red_team/linux-sysmon.log | Other | 20.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027/atomic_red_team/windows-powershell.log | Other | 22.4 MB | 87760aaafb31 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027/atomic_red_team/windows-security.log | Other | 6.0 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027/atomic_red_team/windows-sysmon.log | Other | 11.3 MB | 43562f5040d3 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027/atomic_red_team/windows-system.log | Other | 383.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027/snapattack/snapattack.log | Other | 4.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027/snapattack/snapattack.yml | Other | 443 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027/trickbot_drop/data.yml | Other | 451 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027/trickbot_drop/windows-sysmon.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027/url_encoded_curl/linux-sysmon.log | Other | 1.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027/url_encoded_curl/url_encoded_curl.yml | Other | 630 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1027/url_encoded_curl/windows-sysmon.log | Other | 6.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1030/linux_auditd_split_b_exec/auditd_execve_split.log | Other | 229 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1030/linux_auditd_split_b_exec/linux_auditd_split_b_exec.log | Other | 216 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1030/linux_auditd_split_b_exec/linux_auditd_split_b_exec.yml | Other | 601 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1030/linux_auditd_split_syscall/linux_auditd_split_syscall.log | Other | 459 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1030/linux_auditd_split_syscall/linux_auditd_split_syscall.yml | Other | 448 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1030/linux_auditd_split_syscall_new/linux_auditd_new_split.log | Other | 716 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1030/linux_auditd_split_syscall_new/linux_auditd_split_syscall_new.yml | Other | 452 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1030/osquery_data_chunking/osquery.log | Other | 10.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1030/osquery_data_chunking/osquery.yml | Other | 361 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1030/snapattack/snapattack.log | Other | 2.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1030/snapattack/snapattack.yml | Other | 431 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/AD_discovery/AD_discovery.yml | Other | 684 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/AD_discovery/windows-powershell-xml.log | Other | 5.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/AD_discovery/windows-powershell.log | Other | 989.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/AD_discovery/windows-security.log | Other | 312.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/AD_discovery/windows-sysmon.log | Other | 4.6 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/atomic_red_team/atomic_red_team.yml | Other | 587 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/atomic_red_team/windows-powershell.log | Other | 21.9 MB | 6cd8281b2064 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/atomic_red_team/windows-security.log | Other | 6.2 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/atomic_red_team/windows-sysmon.log | Other | 12.0 MB | 7dc221cd808a |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/atomic_red_team/windows-system.log | Other | 385.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/linux_auditd_whoami/linux_auditd_whoami.log | Other | 1.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/linux_auditd_whoami/linux_auditd_whoami.yml | Other | 413 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/linux_auditd_whoami_new/linux_auditd_new_whoami.log | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/linux_auditd_whoami_new/linux_auditd_whoami_new.yml | Other | 433 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/linux_root_execution_of_id/snapattack.yml | Other | 458 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/linux_root_execution_of_id/snapattack_linux.log | Other | 18.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/qakbot_discovery_cmdline/qakbot_discovery_cmdline.yml | Other | 455 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/qakbot_discovery_cmdline/sysmon.log | Other | 17.5 MB | 7be091ede7f8 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/query_remote_usage/query_remote_usage.log | Other | 8.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/query_remote_usage/query_remote_usage_old.yml | Other | 532 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/snapattack/snapattack.log | Other | 6.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/snapattack/snapattack.yml | Other | 588 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/snapattack/snapattack_linux.log | Other | 9.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/whoami_priv/whoami-priv-security.log | Other | 2.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/whoami_priv/whoami-priv-sysmon.log | Other | 4.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1033/whoami_priv/whoami_priv.yml | Other | 440 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1035.009/suspicious_spawn_svchost/susp_svchost_proc.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1035.009/suspicious_spawn_svchost/suspicious_spawn_svchost_old.yml | Other | 511 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.002/outlook_attachment/right_to_left_override_old.yml | Other | 461 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.002/outlook_attachment/rtlo_events.log | Other | 20.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.003/atomic_red_team/atomic_red_team.yml | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.003/atomic_red_team/windows-powershell.log | Other | 23.4 MB | d7dafe3d28c8 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.003/atomic_red_team/windows-security.log | Other | 2.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.003/atomic_red_team/windows-sysmon.log | Other | 12.6 MB | c9e2c2d4c29f |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.003/atomic_red_team/windows-system.log | Other | 386.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.003/copy_sysmon/copy_sysmon.yml | Other | 418 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.003/copy_sysmon/sysmon.log | Other | 16.3 MB | c51aee2eef5d |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.003/mpcmdrun/mpcmdrun.yml | Other | 403 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.003/mpcmdrun/windows-security.log | Other | 4.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.003/renamed_powershell/renamed_powershell.log | Other | 6.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.003/renamed_powershell/renamed_powershell_old.yml | Other | 493 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.003/samsam_extension/samsam_extension.yml | Other | 440 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.003/samsam_extension/windows-powershell.log | Other | 14.6 MB | dae7ee047978 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.003/samsam_extension/windows-security.log | Other | 5.7 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.003/samsam_extension/windows-sysmon.log | Other | 15.9 MB | d5e36c38774a |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.003/samsam_extension/windows-system.log | Other | 399.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.004/snapattack/snapattack.yml | Other | 432 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.004/snapattack/snapattack_linux.log | Other | 1.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.005/process_in_programdata/exec_programdata.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.005/process_in_programdata/process_in_programdata_old.yml | Other | 582 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.005/snapattack/snapattack.log | Other | 4.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.005/snapattack/snapattack.yml | Other | 449 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.008/masquerading_executable_as_non_exec_file_type/masquerading_executable_as_non_exec_file_type.yml | Other | 581 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.008/masquerading_executable_as_non_exec_file_type/non_exec_ext_but_exec_detected.log | Other | 11.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.009/32bit_process_execute_64bit/32bit_process_execute_64bit_old.yml | Other | 517 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036.009/32bit_process_execute_64bit/32bit_spawn_64bit.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/cmd_lolbas_usage/cmd_lolbas_usage.log | Other | 125.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/cmd_lolbas_usage/cmd_lolbas_usage_old.yml | Other | 535 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/debugger_execution/debugger.log | Other | 9.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/debugger_execution/debugger_execution_old.yml | Other | 526 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/executables_suspicious_file_path/exec_susp_path.log | Other | 5.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/executables_suspicious_file_path/exec_susp_path2.log | Other | 5.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/executables_suspicious_file_path/executables_suspicious_file_path_old.yml | Other | 512 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/linux_possible_system_binary_backdoor/snapattack.yml | Other | 495 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/linux_possible_system_binary_backdoor/snapattack_linux.log | Other | 1.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/linux_suspicious_staging_of_alternate_system_files/snapattack.yml | Other | 534 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/linux_suspicious_staging_of_alternate_system_files/snapattack_linux.log | Other | 1.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/msdtc_process_param/msdtc_a_sec.log | Other | 1.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/msdtc_process_param/msdtc_a_sysmon.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/msdtc_process_param/msdtc_process_param.yml | Other | 456 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/netsupport_modules/net_support_module.log | Other | 7.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/netsupport_modules/netsupport_modules.yml | Other | 468 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/process_temp_path/process_temp_path.log | Other | 8.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/process_temp_path/process_temp_path_old.yml | Other | 494 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/snapattack/snapattack.log | Other | 5.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/snapattack/snapattack.yml | Other | 628 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/snapattack/snapattack_linux.log | Other | 2.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/suspicious_process_path/susp_path_sysmon1.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/suspicious_process_path/suspicious_process_path.yml | Other | 474 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/system_process_running_unexpected_location/dotnet_lolbin-windows-security.log | Other | 5.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/system_process_running_unexpected_location/lolbas_dataset.log | Other | 141.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/system_process_running_unexpected_location/system_process_running_unexpected_location_old.yml | Other | 790 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/system_process_running_unexpected_location/windows-security.log | Other | 4.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/write_to_recycle_bin/windows-powershell.log | Other | 215.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/write_to_recycle_bin/windows-security.log | Other | 49.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/write_to_recycle_bin/windows-sysmon.log | Other | 1.5 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/write_to_recycle_bin/windows-system.log | Other | 364 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1036/write_to_recycle_bin/write_to_recycle_bin.yml | Other | 430 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1037.001/logonscript_reg/logonscript_reg.yml | Other | 480 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1037.001/logonscript_reg/sysmon.log | Other | 26.5 MB | 47f5cfe452cc |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1037.002/osquery_logon_scripts/osquery.log | Other | 18.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1037.002/osquery_logon_scripts/osquery.yml | Other | 369 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1037.005/linux_persistence_via_system_generator/snapattack.yml | Other | 506 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1037.005/linux_persistence_via_system_generator/snapattack_linux.log | Other | 1.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1037.005/snapattack/snapattack.log | Other | 2.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1037.005/snapattack/snapattack.yml | Other | 651 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1037.005/snapattack/snapattack_linux.log | Other | 959 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1040/ssltls/ssl_splunk.log | Other | 860.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1040/ssltls/ssltls_old.yml | Other | 376 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1040/windows_network_sniffing_tools/snapattack.yml | Other | 489 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1040/windows_network_sniffing_tools/snapattack_windows.log | Other | 2.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1041/zeek_ssl/zeek_ssl_old.yml | Other | 356 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1046/advanced_ip_port_scanner/advanced_ip_port_scanner.log | Other | 59.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1046/advanced_ip_port_scanner/advanced_ip_port_scanner.yml | Other | 525 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1046/kubernetes_scanning/kubernetes_scanning.yml | Other | 406 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1046/nmap/horizontal.log | Other | 26.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1046/nmap/nmap_old.yml | Other | 486 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1046/nmap/vertical.log | Other | 6.5 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1046/open_dns_port/linux_dns_openports.log | Other | 13 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1046/open_dns_port/open_dns_port_old.yml | Other | 445 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1046/open_ports_discovery/linux_known_openports.log | Other | 135 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1046/open_ports_discovery/open_ports_discovery_old.yml | Other | 461 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/atomic_red_team/4104-cimmethod-windows-powershell.log | Other | 123.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/atomic_red_team/atomic_red_team.yml | Other | 1.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/atomic_red_team/invokewmiexec_windows-powershell.log | Other | 287.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/atomic_red_team/windows-powershell.log | Other | 22.4 MB | 7bdc21700652 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/atomic_red_team/windows-security.log | Other | 7.3 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/atomic_red_team/windows-sysmon.log | Other | 11.8 MB | 64651720e108 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/atomic_red_team/windows-system.log | Other | 382.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/execution_scrcons/execution_scrcons.yml | Other | 412 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/execution_scrcons/windows-powershell.log | Other | 1.4 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/execution_scrcons/windows-security.log | Other | 330.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/execution_scrcons/windows-sysmon.log | Other | 20.7 MB | 6181de032b63 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/execution_scrcons/windows-system.log | Other | 13.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/lateral_movement/lateral_movement.yml | Other | 543 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/lateral_movement/windows-powershell.log | Other | 5.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/lateral_movement/windows-sysmon.log | Other | 5.4 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/lateral_movement/wmi_remote_process_powershell.log | Other | 1.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/lateral_movement_lolbas/lateral_movement_lolbas.yml | Other | 557 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/lateral_movement_lolbas/windows-security.log | Other | 444.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/lateral_movement_lolbas/windows-sysmon.log | Other | 5.4 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/snapattack/snapattack.log | Other | 2.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/snapattack/snapattack.yml | Other | 461 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/susp_winrar/blank123.log | Other | 4.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/susp_winrar/susp_winrar.yml | Other | 427 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/wmi_impersonate/sysmon.log | Other | 18.6 MB | c5959a3ea71f |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/wmi_impersonate/wmi_impersonate.yml | Other | 428 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/wmic_classes/wmic_classes.yml | Other | 430 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1047/wmic_classes/wmic_cmd.log | Other | 16.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1048.003/archive_http_post/stream_http_events.log | Other | 1.7 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1048.003/cve-2023-23397/cve-2023-23397.yml | Other | 461 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1048.003/cve-2023-23397/webdav_windows-sysmon.log | Other | 9.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1048.003/long_dns_queries/long_dns_queries.yml | Other | 457 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1048.003/long_dns_queries/windows-sysmon.log | Other | 35.5 MB | 3706a06e1a45 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1048.003/mass_file_creation/mass_file_creation.yml | Other | 451 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1048.003/mass_file_creation/windows-sysmon.log | Other | 105.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1048.003/nslookup_exfil/nslookup_exfil.yml | Other | 619 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1048.003/nslookup_exfil/sysmon.log | Other | 41.1 MB | 85fb42529bce |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1048.003/nslookup_exfil/windows-security.log | Other | 10.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1048.003/nslookup_exfil/windows-sysmon.log | Other | 5.7 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1048.003/plain_exfil_data/stream_http_events.log | Other | 1.4 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1048/ftp_connection/ftp_connection.yml | Other | 330 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1048/ftp_connection/zeek_conn.log | Other | 882 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1049/AD_discovery/AD_discovery.yml | Other | 476 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1049/AD_discovery/windows-powershell.log | Other | 1.6 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1049/AD_discovery/windows-security.log | Other | 315.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1049/AD_discovery/windows-sysmon.log | Other | 4.6 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.002/at_execution/at_execution.yml | Other | 409 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.002/at_execution/sysmon_linux.log | Other | 54.0 MB | 31264a654c60 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.002/lateral_movement/lateral_movement.yml | Other | 528 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.002/lateral_movement/windows-security.log | Other | 454.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.002/lateral_movement/windows-sysmon.log | Other | 5.5 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.002/linux_auditd_at/linux_auditd_at.yml | Other | 421 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.002/linux_auditd_at/linux_auditd_at_execution.log | Other | 6.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.002/linux_auditd_chown_root/auditd_proctitle_chown_root.log | Other | 1.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.002/linux_auditd_chown_root/linux_auditd_chown_root.log | Other | 112 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.002/linux_auditd_chown_root/linux_auditd_chown_root.yml | Other | 617 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.002/linux_new_auditd_at/linux_auditd_new_at.log | Other | 3.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.002/linux_new_auditd_at/linux_new_auditd_at.yml | Other | 421 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.003/auditd_path_cron/auditd_path_cron.yml | Other | 399 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.003/auditd_path_cron/path_cron.log | Other | 2.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.003/cronjobs_entry/cronjobs_entry.yml | Other | 607 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.003/cronjobs_entry/sysmon_linux.log | Other | 59.7 MB | 2dbdc9857840 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.003/cronjobs_entry/sysmon_linux_cron_append.log | Other | 7.6 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.003/crontab_edit_parameter/crontab_edit_parameter.yml | Other | 439 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.003/crontab_edit_parameter/sysmon_linux.log | Other | 57.9 MB | 7adcca8fbccf |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.003/crontab_list_parameter/crontab_list_parameter.yml | Other | 439 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.003/crontab_list_parameter/sysmon_linux.log | Other | 394.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.003/linux_auditd_cron_file_audited/linux_auditd_cron_file_audited.yml | Other | 478 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.003/linux_auditd_cron_file_audited/linux_auditd_cron_file_audited2.log | Other | 4.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.003/linux_auditd_cron_file_audited/linux_path_cron.log | Other | 10.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.003/linux_auditd_crontab_edit/linux_auditd_crontab_edit.log | Other | 926 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.003/linux_auditd_crontab_edit/linux_auditd_crontab_edit.yml | Other | 451 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.003/linux_auditd_crontab_edit_new/linux_auditd_crontab_edit_new.yml | Other | 461 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.003/linux_auditd_crontab_edit_new/linux_auditd_new_crontab.log | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.004/osquery_persistence/osquery.log | Other | 5.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.004/osquery_persistence/osquery.yml | Other | 369 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/asyncrat_highest_priv_schtasks/asyncrat_highest_priv_schtasks.yml | Other | 481 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/asyncrat_highest_priv_schtasks/sysmon.log | Other | 17.0 MB | 068cba2851e1 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/atomic_red_team/4104_scheduledtaskcreation.log | Other | 5.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/atomic_red_team/4698_shell_windows-security.log | Other | 9.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/atomic_red_team/4698_windows-security.log | Other | 46.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/atomic_red_team/atomic_red_team.yml | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/atomic_red_team/pwsh_scheduledtask.log | Other | 690.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/atomic_red_team/windows-powershell.log | Other | 21.8 MB | 5f68405d052e |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/atomic_red_team/windows-security.log | Other | 560.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/atomic_red_team/windows-sysmon.log | Other | 11.4 MB | d346ab6c75b3 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/atomic_red_team/windows-system.log | Other | 384.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/lateral_movement/lateral_movement.yml | Other | 711 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/lateral_movement/windows-security-task.log | Other | 3.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/lateral_movement/windows-security.log | Other | 495.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/lateral_movement/windows-sysmon.log | Other | 6.3 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/lateral_movement_lolbas/lateral_movement_lolbas.yml | Other | 548 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/lateral_movement_lolbas/windows-security.log | Other | 451.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/lateral_movement_lolbas/windows-sysmon.log | Other | 5.6 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/schtask_shutdown/schtask_shutdown.yml | Other | 441 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/schtask_shutdown/windows-powershell.log | Other | 14.3 MB | 466c6a1b3ae7 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/schtask_shutdown/windows-security.log | Other | 5.6 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/schtask_shutdown/windows-sysmon.log | Other | 15.4 MB | cafa411c6706 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/schtask_shutdown/windows-system.log | Other | 388.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/schtask_system/schtask_system.yml | Other | 434 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/schtask_system/windows-sysmon.log | Other | 2.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/schtasks/schtasks.yml | Other | 454 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/schtasks/windows-security.log | Other | 168.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/schtasks/windows-sysmon.log | Other | 626.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/svchost_lolbas_execution_process_spawn/data.yml | Other | 528 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/svchost_lolbas_execution_process_spawn/windows-xml.log | Other | 1.0 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/tasksched/windows-security.log | Other | 2.9 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/taskschedule/sd_delete_windows-sysmon.log | Other | 376.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/taskschedule/taskschedule.yml | Other | 678 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/taskschedule/windows-security-publicpath.log | Other | 6.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/taskschedule/windows-security.log | Other | 29.8 MB | 8be52f335347 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/taskschedule/windows-sysmon.log | Other | 278.4 MB | 678bf87bed4d |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/windows_taskschedule/windows-taskschedule.log | Other | 33.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/windows_taskschedule/windows-taskschedule_xml.log | Other | 13.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/windows_taskschedule/windows_taskschedule.yml | Other | 494 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/winevent_scheduled_task_created_to_spawn_shell/data.yml | Other | 524 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/winevent_scheduled_task_created_to_spawn_shell/windows-xml.log | Other | 2.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/winevent_scheduled_task_with_suspect_name/windows-xml.log | Other | 3.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/winevent_scheduled_task_with_suspect_name/winevent_scheduled_task_with_suspect_name.yml | Other | 446 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/winevent_windows_task_scheduler_event_action_started/data.yml | Other | 565 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.005/winevent_windows_task_scheduler_event_action_started/windows-xml.log | Other | 1.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.006/linux_services_restart/auditd_proctitle_service_restart.log | Other | 13.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.006/linux_services_restart/linux_services_restart.log | Other | 4.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.006/linux_services_restart/linux_services_restart.yml | Other | 456 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.006/service_systemd/service_systemd.yml | Other | 418 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.006/service_systemd/sysmon_linux.log | Other | 59.7 MB | 0a83169ecfc9 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053.007/kubernetes_audit_cron_job_creation/kubernetes_audit_cron_job_creation.yml | Other | 482 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053/hidden_schedule_task/hidden_schedule_task_old.yml | Other | 477 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053/hidden_schedule_task/inno_schtask.log | Other | 9.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053/hidden_schedule_task/security.log | Other | 196.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053/snapattack/snapattack.log | Other | 9.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053/snapattack/snapattack.yml | Other | 426 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053/taskschd_dll/taskschd_dll.log | Other | 7.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053/taskschd_dll/taskschd_dll_old.yml | Other | 504 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053/valleyrat_schedtask/valleyrat_schedtask.log | Other | 3.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1053/valleyrat_schedtask/valleyrat_schedtask_old.yml | Other | 497 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055.001/rasautou/rasautou.yml | Other | 395 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055.001/rasautou/windows-security.log | Other | 16.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055.001/rasautou/windows-sysmon.log | Other | 118.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/cobalt_strike/Cobalt_spawnto.log | Other | 1.7 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/cobalt_strike/cobalt_strike.yml | Other | 889 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/cobalt_strike/windows-sysmon.log | Other | 156.5 MB | 9065443020ab |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/cobalt_strike/windows-sysmon_dllhost.log | Other | 9.9 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/cobalt_strike/windows-sysmon_searchprotocolhost.log | Other | 1.5 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/msra/msra-windows-sysmon.log | Other | 15.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/msra/msra.yml | Other | 647 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/msra/raw-msra-windows-sysmon.log | Other | 5.6 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/msra/windows-security.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/named_pipes/named_pipes.yml | Other | 465 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/named_pipes/windows-sysmon.log | Other | 39.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/non-service-searchindexer/non-service-searchindexer_old.yml | Other | 507 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/non-service-searchindexer/seaarch-indexer-non-service.log | Other | 5.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/non-service-searchindexer/searchindexer-security.log | Other | 4.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/sliver/T1055_windows-sysmon.log | Other | 8.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/sliver/notepad_windows-sysmon.log | Other | 53.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/sliver/sliver.yml | Other | 783 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/sliver/sliver_windows-system.log | Other | 1.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/snapattack/snapattack.log | Other | 11.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/snapattack/snapattack.yml | Other | 466 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/splunk_ds/splunkd.log | Other | 3.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/splunk_ds/splunkd_old.yml | Other | 378 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/trickbot_inf/data.yml | Other | 448 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1055/trickbot_inf/windows-sysmon.log | Other | 29.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1057/process_commandline_discovery/process_commandline_discovery.yml | Other | 496 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1057/process_commandline_discovery/wmic-cmdline-sysmon.log | Other | 64.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1057/process_commandline_discovery/wmic-get-cmdline-security.log | Other | 43.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1057/snapattack/snapattack.log | Other | 38.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1057/snapattack/snapattack.yml | Other | 462 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/asyncrat_crypto_pwh_namespace/asyncrat_crypto_pwh_namespace.yml | Other | 514 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/asyncrat_crypto_pwh_namespace/windows-powershell-xml.log | Other | 2.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/atomic_red_team/4104-psremoting-windows-powershell.log | Other | 41.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/atomic_red_team/atomic_red_team.yml | Other | 2.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/atomic_red_team/captcha_windows-sysmon.log | Other | 2.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/atomic_red_team/carbon_black_events.log | Other | 2.0 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/atomic_red_team/downloadfile_windows-security.log | Other | 3.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/atomic_red_team/enableat_windows-sysmon.log | Other | 2.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/atomic_red_team/get_ciminstance_windows-powershell.log | Other | 5.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/atomic_red_team/irm_powershell.log | Other | 9.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/atomic_red_team/start_stop_service_windows-powershell.log | Other | 27.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/atomic_red_team/win32_scheduledjob_windows-powershell.log | Other | 21.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/atomic_red_team/windows-powershell.log | Other | 6.3 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/atomic_red_team/windows-security-2.log | Other | 1.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/atomic_red_team/windows-security.log | Other | 593.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/atomic_red_team/windows-sysmon.log | Other | 38.9 MB | 8f71b2a0ef81 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/encoded_powershell/encoded_powershell.yml | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/encoded_powershell/explorer_spawns_windows-sysmon.log | Other | 13.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/encoded_powershell/padded_windows-sysmon.log | Other | 11.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/encoded_powershell/windows-security.log | Other | 1.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/encoded_powershell/windows-sysmon.log | Other | 2.0 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/exchange/exchange.yml | Other | 674 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/exchange/msexchangemanagement.log | Other | 3.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/exchange/windows-powershell.log | Other | 12.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/hidden_powershell/hidden_powershell.yml | Other | 470 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/hidden_powershell/hidden_windows-security.log | Other | 353.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/hidden_powershell/windows-powershell.log | Other | 41.3 MB | bcc19046fc6d |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/hidden_powershell/windows-security.log | Other | 6.6 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/hidden_powershell/windows-sysmon.log | Other | 32.6 MB | bac9c10fe7ae |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/hidden_powershell/windows-system.log | Other | 399.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/import_applocker_policy/import_applocker_policy.yml | Other | 490 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/import_applocker_policy/windows-powershell-xml2.log | Other | 1.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/malicious_cmd_line_samples/malicious_cmd_line_samples.yml | Other | 478 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/malicious_cmd_line_samples/windows-sysmon.log | Other | 32.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/msix_powershell/msix_powershell.yml | Other | 446 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/msix_powershell/windows-sysmon.log | Other | 7.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/obfuscated_powershell/obfuscated_powershell.yml | Other | 473 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/obfuscated_powershell/windows-sysmon.log | Other | 54.7 MB | 70d3c6982eb0 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_execution_policy/powershell_execution_policy.yml | Other | 550 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_execution_policy/windows-powershell.log | Other | 11.5 MB | 8dae5fcdfb04 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_execution_policy/windows-security.log | Other | 5.5 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_execution_policy/windows-sysmon.log | Other | 14.6 MB | 7854054b5fa7 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_execution_policy/windows-system.log | Other | 390.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_remotesigned/powershell_remotesigned.yml | Other | 946 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_remotesigned/remotesigned_security.log | Other | 1.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_remotesigned/remotesigned_sysmon.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_remotesigned/windows-powershell-remote-xml.log | Other | 1.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_remotesigned/windows-powershell-xml.log | Other | 3.3 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_script_block_logging/credaccess-powershell.log | Other | 13.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_script_block_logging/domaingroup.log | Other | 925 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_script_block_logging/domainpolicy.log | Other | 925 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_script_block_logging/domaintrust.log | Other | 925 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_script_block_logging/empire.log | Other | 2.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_script_block_logging/enumeration.log | Other | 2.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_script_block_logging/frombase64string.log | Other | 28.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_script_block_logging/getdc.log | Other | 930 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_script_block_logging/getdomainuser.log | Other | 944 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_script_block_logging/getlocalgroup.log | Other | 1.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_script_block_logging/nettcpconnection.log | Other | 929 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_script_block_logging/powershell_script_block_logging.yml | Other | 947 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_script_block_logging/pswa_powershell.log | Other | 4.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_script_block_logging/pwsh_multipass.log | Other | 723 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_script_block_logging/reconusingwmi.log | Other | 28.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_script_block_logging/reflection.log | Other | 2.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_script_block_logging/sbl_xml.log | Other | 1.2 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_script_block_logging/single_event_delete_shadowcopy.log | Other | 987 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_script_block_logging/streamreader.log | Other | 1.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_script_block_logging/win32process.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_script_block_logging/windows-powershell-xml.log | Other | 5.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_script_block_logging/windows-powershell.log | Other | 6.5 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_script_block_logging/windows-sysmon.log | Other | 18.2 MB | 04daf83b69e4 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_testing/powershell_testing.yml | Other | 487 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_testing/windows-powershell.log | Other | 77.0 MB | e845d4875847 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_testing/windows-security.log | Other | 2.4 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_testing/windows-sysmon.log | Other | 13.6 MB | fa2961e63bef |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_xml_requests/powershell_xml_requests.yml | Other | 491 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_xml_requests/windows-powershell.log | Other | 23.9 MB | bc6a00a630dc |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_xml_requests/windows-security.log | Other | 6.0 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_xml_requests/windows-sysmon.log | Other | 10.8 MB | c9c7f3a36611 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/powershell_xml_requests/windows-system.log | Other | 383.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/sharphound/sharphound.yml | Other | 444 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/sharphound/windows-powershell.log | Other | 6.2 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/sharphound/windows-sysmon.log | Other | 14.7 MB | 29f4f1a561c2 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/snapattack/snapattack.log | Other | 136.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/snapattack/snapattack.yml | Other | 454 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/soaphound/soaphound.yml | Other | 445 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/soaphound/sysmon_soaphound.log | Other | 118.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/threat_allow_switch/threat_allow_salat.log | Other | 5.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/threat_allow_switch/threat_allow_switch.yml | Other | 483 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/trickbot_cmd_powershell/data.yml | Other | 489 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/trickbot_cmd_powershell/windows-sysmon.log | Other | 46.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/unmanaged_powershell_execution/unmanaged_powershell_execution.yml | Other | 504 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/unmanaged_powershell_execution/windows-sysmon.log | Other | 89.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/vip_env_var_execution/env_vip_pwh_intl.log | Other | 22.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/vip_env_var_execution/vip_env_var_execution.yml | Other | 485 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/vip_injection_pwh/pwh_net_inline.log | Other | 8.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.001/vip_injection_pwh/vip_injection_pwh.yml | Other | 469 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.002/amos_stealer/amos_stealer.log | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.002/amos_stealer/amos_stealer_old.yml | Other | 521 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.002/osascript/osascript_prompts_user.log | Other | 7.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.002/osascript/osascript_prompts_user.yml | Other | 457 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.002/osascript_JavaScript_command_execution_Objective_C/osascript_JavaScript_command_execution_Objective_C.log | Other | 2.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.002/osascript_JavaScript_command_execution_Objective_C/osascript_JavaScript_command_execution_Objective_C.yml | Other | 588 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.002/osascript_do_shell_script/osascript_do_shell_script.log | Other | 2.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.002/osascript_do_shell_script/osascript_do_shell_script.yml | Other | 486 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.002/osascript_long_lived_connection_to_remote_host/osascript_long_lived_connection_to_remote_host.log | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.002/osascript_long_lived_connection_to_remote_host/osascript_long_lived_connection_to_remote_host.yml | Other | 637 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.002/osascript_spawns_shell_process/osascript_spawns_shell_process.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.002/osascript_spawns_shell_process/osascript_spawns_shell_process.yml | Other | 493 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/atomic_red_team/atomic_red_team.yml | Other | 421 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/atomic_red_team/invokesqlcmd_powershell.log | Other | 591.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/atomic_red_team/sqlcmd_windows_sysmon.log | Other | 16.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/cmd_arguments/cmd_arguments_old.yml | Other | 435 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/cmd_arguments/windows-security.log | Other | 2.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/cmd_for_loop/cmd_for_loop.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/cmd_for_loop/cmd_for_loop.yml | Other | 497 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/cmd_spawns_cscript/cmd_spawns_cscript.yml | Other | 459 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/cmd_spawns_cscript/windows-powershell.log | Other | — | |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/cmd_spawns_cscript/windows-security.log | Other | 64.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/cmd_spawns_cscript/windows-sysmon.log | Other | 1.6 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/cmd_spawns_cscript/windows-system.log | Other | — | |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/delete_pwh_history/delete_pwh_history_file.log | Other | 1.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/delete_pwh_history/delete_pwh_history_old.yml | Other | 511 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/powershell_spawn_cmd/powershell_spawn_cmd.yml | Other | 461 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/powershell_spawn_cmd/windows-powershell.log | Other | 14.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/powershell_spawn_cmd/windows-security.log | Other | 6.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/powershell_spawn_cmd/windows-sysmon.log | Other | 957.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/powershell_spawn_cmd/windows-system.log | Other | — | |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/prohibited_cmd_spawn/prohibited_apps_spawning_cmd.log | Other | 14.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/ryuk/ryuk.yml | Other | 471 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/ryuk/windows-sysmon.log | Other | 3.4 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/snapattack/snapattack.log | Other | 1.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/snapattack/snapattack.yml | Other | 441 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/ssa_validation/browsers/browsers_old.yml | Other | 445 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/ssa_validation/browsers/windows-security.log | Other | 6.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/ssa_validation/office/office_old.yml | Other | 443 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/ssa_validation/office/windows-security.log | Other | 6.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/unusally_cmd_line/unusally_cmd_line_old.yml | Other | 434 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.003/unusally_cmd_line/windows-security.log | Other | 2.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.004/linux_discovery_tools/linux_discovery_tools.yml | Other | 427 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.004/linux_discovery_tools/sysmon_linux.log | Other | 2.9 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.004/linux_netcat_outbound_connection/snapattack.yml | Other | 484 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.004/linux_netcat_outbound_connection/snapattack_linux.log | Other | 2.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.004/macos_lolbin/macos_lolbin_old.yml | Other | 508 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.004/macos_lolbin/osquery.log | Other | 17.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.004/snapattack/snapattack.yml | Other | 439 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.004/snapattack/snapattack_linux.log | Other | 4.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.005/discord_dnsquery/discord_dnsquery.yml | Other | 431 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.005/discord_dnsquery/sysmon.log | Other | 47.5 MB | 6ad60e5232de |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.005/lotus_blossom_chrysalis/dataset.yml | Other | 630 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.005/lotus_blossom_chrysalis/windows-sysmon.log | Other | 4.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.005/snapattack/snapattack.log | Other | 7.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.005/snapattack/snapattack.yml | Other | 458 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.005/vbs_wscript/sysmon.log | Other | 10.3 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.005/vbs_wscript/vbs_wscript.yml | Other | 457 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.006/snapattack/snapattack.log | Other | 2.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.006/snapattack/snapattack.yml | Other | 424 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.007/node_execute_js_script/node_execute_js_script.log | Other | 14.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.007/node_execute_js_script/node_execute_js_script.yml | Other | 533 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.007/snapattack/snapattack.log | Other | 4.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059.007/snapattack/snapattack.yml | Other | 432 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/autoit/autoit.yml | Other | 391 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/autoit/cab_files.log | Other | 9.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/autoit/sysmon.log | Other | 89.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/autoit/windbg_autoit.log | Other | 2.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/defender/asr_audit.log | Other | 10.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/defender/asr_block.log | Other | 17.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/defender/asr_defender_operational.log | Other | 231.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/defender/asr_disabled_registry.log | Other | 1.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/defender/asr_registry.log | Other | 80.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/defender/ms_defender_old.yml | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/esxi_reverse_shell/esxi_reverse_shell.log | Other | 144 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/esxi_reverse_shell/esxi_reverse_shell.yml | Other | 429 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/excessive_distinct_processes_from_windows_temp/data.yml | Other | 516 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/excessive_distinct_processes_from_windows_temp/windows-xml.log | Other | 191.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/linux_bash_reverse_shell/snapattack.yml | Other | 452 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/linux_bash_reverse_shell/snapattack_linux.log | Other | 3.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/linux_binary_executed_from_shared_memory_directory/snapattack.yml | Other | 528 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/linux_binary_executed_from_shared_memory_directory/snapattack_linux.log | Other | 1.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/log4shell_ldap_traffic/log4shell_ldap_traffic_old.yml | Other | 470 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/log4shell_ldap_traffic/pantraffic.log | Other | 6.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/macos_browser_spawned_script_external_network_connection/nvm_flowdata.log | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/macos_browser_spawned_script_external_network_connection/nvm_flowdata.yml | Other | 518 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/metasploit/apachebench_windows-sysmon.log | Other | 70.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/metasploit/metasploit.yml | Other | 426 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/metasploit/msf.powershell.powershell.log | Other | 13.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/meterpreter/taskhost_processes/logExcessiveTaskHost.log | Other | 81.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/meterpreter/taskhost_processes/taskhost_processes_old.yml | Other | 559 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/meterpreter/windows_temp_processes/logExcessiveWindowsTemp.log | Other | 128.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/meterpreter/windows_temp_processes/windows_temp_processes_old.yml | Other | 532 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/path_traversal/path_traversal.yml | Other | 417 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/path_traversal/sysmon.log | Other | 4.5 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/protocol_handlers/protocol_handlers_old.yml | Other | 451 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/protocol_handlers/protocolhandlers.log | Other | 17.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/risk_behavior/abused_commandline/abused_commandline_old.yml | Other | 435 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/risk_behavior/abused_commandline/risk_recon.log | Other | 665.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/snapattack/snapattack.log | Other | 22.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/snapattack/snapattack.yml | Other | 631 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/snapattack/snapattack_linux.log | Other | 1.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/splunk/splunk_mrollup_abuse_audittrail.log | Other | 82.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/suspiciously_named_executables/suspiciously_named_executables.yml | Other | 557 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/suspiciously_named_executables/windows-sysmon.log | Other | 1.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/utility_socat_listener_binding_executable/osquery.log | Other | 2.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/utility_socat_listener_binding_executable/osquery.yml | Other | 636 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/utility_socat_remote_tcp_connection_with_echo_disabled/osquery.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/utility_socat_remote_tcp_connection_with_echo_disabled/osquery.yml | Other | 687 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/vmtoolsd/vmtoolsd_execution.log | Other | 2.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1059/vmtoolsd/vmtoolsd_execution.yml | Other | 452 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/bluehammer/bluehammer.yml | Other | 623 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/bluehammer/windows-security.log | Other | 8.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/bluehammer/windows-sysmon.log | Other | 6.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/drivers/7045_kerneldrivers.log | Other | 10.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/drivers/driver_inventory.log | Other | 64.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/drivers/drivers.yml | Other | 568 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/drivers/sc_kernel.log | Other | 29.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/drivers/sysmon_sys_filemod.log | Other | 635.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/drivers/xml7045_windows-system.log | Other | 20.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/linux_auditd_copy_fail/auth.log | Other | 233 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/linux_auditd_copy_fail/kern.log | Other | 72.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/linux_auditd_copy_fail/linux_auditd.log | Other | 78.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/linux_auditd_copy_fail/linux_auditd.yml | Other | 709 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/linux_dirtyfrag/audit.log | Other | 6.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/linux_dirtyfrag/dirty_frag_events_trimmed.log | Other | 126.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/linux_dirtyfrag/kern.log | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/linux_dirtyfrag/linux_dirtyfrag.yml | Other | 881 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/linux_dirtyfrag/linux_sysmon.log | Other | 6.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/linux_pedit/linux_auditd.log | Other | 307 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/linux_pedit/linux_pedit.yml | Other | 713 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/linux_pedit/syslog.log | Other | 196 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/linux_pedit/sysmon_linux.log | Other | 1.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/linux_possible_linux_gsm_privilege_escalation/snapattack.yml | Other | 519 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/linux_possible_linux_gsm_privilege_escalation/snapattack_linux.log | Other | 3.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/linux_possible_nimbuspwn_directory_traversal/snapattack.yml | Other | 516 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/linux_possible_nimbuspwn_directory_traversal/snapattack_linux.log | Other | 3.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/linux_possible_privilege_escalation_via_pythonpath/snapattack.yml | Other | 534 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/linux_possible_privilege_escalation_via_pythonpath/snapattack_linux.log | Other | 1.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/osquery_system_startup/osquery.log | Other | 3.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/osquery_system_startup/osquery.yml | Other | 362 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/pkexec/linux-sysmon.log | Other | 1.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/pkexec/pkexec_lpe_old.yml | Other | 397 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/redsun/redsun.yml | Other | 441 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/redsun/windows-sysmon.log | Other | 9.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/snapattack/snapattack.log | Other | 22.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/snapattack/snapattack.yml | Other | 608 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/snapattack/snapattack_linux.log | Other | 6.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/windows_escalation_behavior/windows_escalation_behavior.yml | Other | 508 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/windows_escalation_behavior/windows_escalation_behavior_sysmon.log | Other | 533.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/windows_suspicious_child_of_consent_exe/snapattack.yml | Other | 519 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/windows_suspicious_child_of_consent_exe/snapattack_windows.log | Other | 2.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/zoom_child_process/windows-powershell.log | Other | — | |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/zoom_child_process/windows-security.log | Other | 64.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/zoom_child_process/windows-sysmon.log | Other | 18.1 MB | 0b9bc4c33b80 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/zoom_child_process/windows-system.log | Other | 2.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1068/zoom_child_process/zoom_child_process.yml | Other | 425 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1069.001/atomic_red_team/atomic_red_team.yml | Other | 646 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1069.001/atomic_red_team/windows-powershell-xml.log | Other | 5.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1069.001/atomic_red_team/windows-powershell.log | Other | 219.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1069.001/atomic_red_team/windows-sysmon.log | Other | 85.0 MB | ffee39348e7c |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1069.001/njrat_admin_check/njrat_admin_check_old.yml | Other | 478 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1069.001/njrat_admin_check/win_dat.log | Other | 1.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1069.002/AD_discovery/AD_discovery.yml | Other | 1.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1069.002/AD_discovery/ldifde_4688_windows-security.log | Other | 6.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1069.002/AD_discovery/ldifde_windows-sysmon.log | Other | 11.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1069.002/AD_discovery/windows-powershell-xml-powerview.log | Other | 253.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1069.002/AD_discovery/windows-powershell-xml.log | Other | 1.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1069.002/AD_discovery/windows-powershell.log | Other | 15.0 MB | c0fb303f1b9f |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1069.002/AD_discovery/windows-security.log | Other | 322.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1069.002/AD_discovery/windows-sysmon.log | Other | 4.9 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1069.002/AD_discovery/windows-xml.log | Other | 9.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1069.002/domain_group_discovery_with_adsisearcher/data.yml | Other | 560 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1069.002/domain_group_discovery_with_adsisearcher/windows-powershell-xml.log | Other | 961 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1069/snapattack/snapattack.log | Other | 1.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1069/snapattack/snapattack.yml | Other | 429 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.001/atomic_red_team/atomic_red_team.yml | Other | 544 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.001/atomic_red_team/windows-powershell.log | Other | 8.7 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.001/atomic_red_team/windows-security.log | Other | 6.4 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.001/atomic_red_team/windows-sysmon.log | Other | 11.3 MB | 58a5e3465bdc |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.001/atomic_red_team/windows-system.log | Other | 391.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.001/ssa_wevtutil/clear_evt.log | Other | 5.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.001/ssa_wevtutil/disable_evt.log | Other | 3.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.001/ssa_wevtutil/windows-security.log | Other | 1.3 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.001/suspicious_event_log_service_behavior/data.yml | Other | 515 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.001/suspicious_event_log_service_behavior/windows-xml.log | Other | 10.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.001/suspicious_kerberos_service_ticket_request/data.yml | Other | 512 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.001/suspicious_kerberos_service_ticket_request/windows-xml.log | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.001/windows_event_log_cleared/data.yml | Other | 646 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.001/windows_event_log_cleared/windows-security.log | Other | 878 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.001/windows_event_log_cleared/windows-system.log | Other | 878 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.001/windows_pwh_log_cleared/wevtutil_clear_log.log | Other | 26.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.001/windows_pwh_log_cleared/windows_pwh_log_cleared_old.yml | Other | 558 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.003/ConsoleHost_History_deletion/ConsoleHost_History_deletion_old.yml | Other | 527 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.003/ConsoleHost_History_deletion/HistorySavePath_powershell.log | Other | 3.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.003/ConsoleHost_History_deletion/delete_pwh_history_file.log | Other | 1.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.004/automatic_file_deleted/automatic_file_deleted.log | Other | 2.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.004/automatic_file_deleted/automatic_file_deleted.yml | Other | 472 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.004/bmc_file_deleted/bmc_file_deleted.log | Other | 1.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.004/bmc_file_deleted/bmc_file_deleted.yml | Other | 454 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.004/cipher/cipher_old.yml | Other | 465 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.004/cipher/security.log | Other | 680.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.004/rdp_deletion/rdp_deletion.yml | Other | 442 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.004/rdp_deletion/rdp_file_deleted.log | Other | 2.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.004/terminal_server_reg_deleted/terminal_server_client_reg_deleted.log | Other | 3.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.004/terminal_server_reg_deleted/terminal_server_reg_deleted.yml | Other | 487 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.005/atomic_red_team/atomic_red_team.yml | Other | 623 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.005/atomic_red_team/windows-powershell.log | Other | 25.4 MB | cb808a84f0b2 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.005/atomic_red_team/windows-security.log | Other | 6.1 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.005/atomic_red_team/windows-sysmon.log | Other | 11.8 MB | db03626e00b3 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070.005/atomic_red_team/windows-system.log | Other | 380.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070/atomic_red_team/atomic_red_team.yml | Other | 485 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070/atomic_red_team/windows-powershell.log | Other | 23.7 MB | 31505d17929f |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070/atomic_red_team/windows-security.log | Other | 6.1 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070/atomic_red_team/windows-sysmon.log | Other | 11.1 MB | c14f25805f90 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070/atomic_red_team/windows-system.log | Other | 380.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070/esxi_system_clock_manipulation/esxi_system_clock_manipulation.log | Other | 666 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070/esxi_system_clock_manipulation/esxi_system_clock_manipulation.yml | Other | 454 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070/fsutil_file_zero/fsutil_file_zero.yml | Other | 449 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070/fsutil_file_zero/windows-security.log | Other | 10.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070/fsutil_file_zero/windows-sysmon.log | Other | 56.5 MB | 9339f7ec826b |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070/illegal_log_deletion/illegal_log_deletion_old.yml | Other | 424 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070/illegal_log_deletion/logAllMimikatzModules.log | Other | 21.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070/osquery_log_removal/osquery.log | Other | 5.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070/osquery_log_removal/osquery.yml | Other | 359 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070/remove_windows_security_event_log/remove_windows_security_event_log.yml | Other | 458 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070/remove_windows_security_event_log/windows_security_xml.log | Other | 1.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070/rmdir_delete_files_and_dir/rmdir.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070/rmdir_delete_files_and_dir/rmdir_delete_files_and_dir_old.yml | Other | 493 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1070/rmdir_delete_files_and_dir/rmdir_sec.log | Other | 1.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071.001/http_user_agents/http_user_agents.yml | Other | 819 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071.001/http_user_agents/suricata_c2.log | Other | 62.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071.001/http_user_agents/suricata_malware.log | Other | 7.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071.001/http_user_agents/suricata_pua.log | Other | 3.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071.001/http_user_agents/suricata_rmm.log | Other | 3.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071.001/snapattack/snapattack.log | Other | 4.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071.001/snapattack/snapattack.yml | Other | 438 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071.002/outbound_smb_traffic/outbound_smb_traffic.yml | Other | 374 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071.002/outbound_smb_traffic/zeek_conn.log | Other | 8.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071.004/kerberos_coercion/kerberos_coercion.yml | Other | 757 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071.004/kerberos_coercion/suricata.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071.004/kerberos_coercion/sysmon.log | Other | 3.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071.004/kerberos_coercion/windows-xml.log | Other | 14.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071.004/long_dns_query/atomic_red_team.yml | Other | 496 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071.004/long_dns_query/dns-sysmon.log | Other | 14.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071.004/snapattack/snapattack.log | Other | 2.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071.004/snapattack/snapattack.yml | Other | 472 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071.004/upload_files_dns/upload_files.log | Other | 2.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071.004/upload_files_dns/upload_files_dns.yml | Other | 458 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071.004/vbc_dnsquery/vbc_dns_query.log | Other | 8.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071.004/vbc_dnsquery/vbc_dnsquery.yml | Other | 448 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071.004/windows_powershell_commands_from_dns_txt/snapattack.yml | Other | 534 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071.004/windows_powershell_commands_from_dns_txt/snapattack_windows.log | Other | 1.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071/finger_remote_host/finger_remote_host.log | Other | 33.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1071/finger_remote_host/finger_remote_host.yml | Other | 525 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1072/intune/intune.log | Other | 3.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1072/intune/intune_old.yml | Other | 530 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1074/snapattack/snapattack.log | Other | 2.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1074/snapattack/snapattack.yml | Other | 440 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.001/snapattack/snapattack.log | Other | 1.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.001/snapattack/snapattack.yml | Other | 421 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.002/account_lockout/account_lockout.yml | Other | 769 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.002/account_lockout/windows-powershell.log | Other | 8.6 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.002/account_lockout/windows-security.log | Other | 10.6 MB | e60b409cbf58 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.002/account_lockout/windows-sysmon.log | Other | 18.5 MB | 4e60dea37a82 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.002/account_lockout/windows-system.log | Other | 799.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.002/account_lockout/windows-xml-1.log | Other | 5.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.002/account_lockout/windows-xml.log | Other | 34.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.002/account_login/account_login_old.yml | Other | 426 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.002/account_login/windows-security.log | Other | 77.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.002/powerview_acl_enumeration/powerview_acl_enumeration.yml | Other | 503 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.002/powerview_acl_enumeration/windows-powershell.log | Other | 10.2 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.002/samaccountname_spoofing/samaaccountname_spoofing_old.yml | Other | 749 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.002/samaccountname_spoofing/windows-security.log | Other | 64.6 MB | bbb116c564e3 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.002/samaccountname_spoofing/windows-system.log | Other | 3.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.002/suspicious_computer_account_name_change/data.yml | Other | 503 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.002/suspicious_computer_account_name_change/windows-xml.log | Other | 53.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.002/suspicious_ticket_granting_ticket_request/data.yml | Other | 509 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.002/suspicious_ticket_granting_ticket_request/windows-xml.log | Other | 4.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.003/builtin_account_rename/builtin_account_rename.yml | Other | 456 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.003/builtin_account_rename/windows_security.log | Other | 1.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.003/snapattack/snapattack.log | Other | 3.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.003/snapattack/snapattack.yml | Other | 418 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.004/aws_login_sfa/aws_login_sfa_old.yml | Other | 432 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.004/azure_ad_service_principal_authentication/azure_ad_service_principal_authentication.log | Other | 85.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.004/azure_ad_service_principal_authentication/azure_ad_service_principal_authentication.yml | Other | 629 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.004/azure_automation_runbook/azure-activity.log | Other | 23.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.004/azure_automation_runbook/azure_automation_runbook.yml | Other | 515 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.004/azure_runbook_webhook/azure-activity.log | Other | 16.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.004/azure_runbook_webhook/azure_runbook_webhook.yml | Other | 544 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.004/azuread/azure-audit.log | Other | 7.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.004/azuread/azuread.yml | Other | 563 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.004/azuread_pws/azure-audit.log | Other | 20.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.004/azuread_pws/azuread_pws.yml | Other | 550 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.004/gcp_single_factor_auth/gcp_single_factor_auth.yml | Other | 576 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.004/gcp_single_factor_auth/gws_login.log | Other | 652 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.004/o365_security_and_compliance_alert_triggered/o365_security_and_compliance_alert_triggered.log | Other | 9.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.004/o365_security_and_compliance_alert_triggered/o365_security_and_compliance_alert_triggered.yml | Other | 576 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.004/okta_single_factor_auth/okta_single_factor_auth.log | Other | 12.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.004/okta_single_factor_auth/okta_single_factor_auth.yml | Other | 444 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.004/okta_threatinsight_threat_detected/okta_threatinsight_threat_detected.log | Other | 10.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078.004/okta_threatinsight_threat_detected/okta_threatinsight_threat_detected.yml | Other | 501 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/assume_role_with_saml/assume_role_with_saml_old.yml | Other | 414 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/attach_role_trust_policy/attach_role_trust_policy_old.yml | Other | 648 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/attach_user_to_role/attach_user_to_role_old.yml | Other | 639 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/aws_create_policy_version/aws_create_policy_version.yml | Other | 691 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/aws_createaccesskey/aws_createaccesskey.yml | Other | 829 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/aws_createloginprofile/aws_createloginprofile.yml | Other | 666 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/aws_saml_access_by_provider_user_and_principal/aws_saml_access_by_provider_user_and_principal.yml | Other | 782 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/aws_saml_update_identity_provider/aws_saml_update_identity_provider.yml | Other | 680 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/aws_setdefaultpolicyversion/aws_setdefaultpolicyversion.yml | Other | 665 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/aws_updateloginprofile/aws_updateloginprofile.yml | Other | 860 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/azure_ad_multiple_appids_and_useragents_auth/azure_ad_multiple_appids_and_useragents_auth.log | Other | 40.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/azure_ad_multiple_appids_and_useragents_auth/azure_ad_multiple_appids_and_useragents_auth.yml | Other | 523 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/create_IAM_role/create_IAM_role_old.yml | Other | 729 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/defaultaccount/defaultaccount.yml | Other | 443 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/defaultaccount/windows-sysmon.log | Other | 23.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/esxi_external_root_login/esxi_external_root_login.log | Other | 1.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/esxi_external_root_login/esxi_external_root_login.yml | Other | 439 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/esxi_stolen_root_account/esxi_stolen_root_account.log | Other | 6.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/esxi_stolen_root_account/esxi_stolen_root_account.yml | Other | 458 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/gcploit_exploitation_framework/gcploit_exploitation_framework_old.yml | Other | 614 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/high_risk_permission_by_resource/high_risk_permission_by_resource_old.yml | Other | 638 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/high_risk_role_by_project/high_risk_role_by_project_old.yml | Other | 647 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/o365_excessive_sso_logon_errors/o365_excessive_sso_logon_errors.yml | Other | 604 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/o365_multiple_appids_and_useragents_auth/o365_multiple_appids_and_useragents_auth.log | Other | 35.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/o365_multiple_appids_and_useragents_auth/o365_multiple_appids_and_useragents_auth.yml | Other | 503 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/okta_suspicious_activity_reported_by_user/okta_suspicious_activity_reported_by_user.log | Other | 3.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/okta_suspicious_activity_reported_by_user/okta_suspicious_activity_reported_by_user.yml | Other | 513 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/snapattack/snapattack.log | Other | 10.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/snapattack/snapattack.yml | Other | 460 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/special_logon_on_mulitple_hosts/special_logon_on_mulitple_hosts.yml | Other | 580 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/special_logon_on_mulitple_hosts/windows-security.log | Other | 2.3 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/splunkd_auth/audittrail.log | Other | 4.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/splunkd_auth/audittrail_old.yml | Other | 415 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/sts_assumerole_usage/sts_assumerole_usage_old.yml | Other | 653 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1078/update_saml_provider/update_saml_provider.yml | Other | 391 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1082/atomic_red_team/atomic_red_team.yml | Other | 411 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1082/atomic_red_team/linux-sysmon.log | Other | 1.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1082/atomic_red_team/windows-powershell.log | Other | 8.6 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1082/atomic_red_team/windows-security.log | Other | 6.5 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1082/atomic_red_team/windows-sysmon.log | Other | 11.7 MB | 5de7771a04ca |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1082/atomic_red_team/windows-system.log | Other | 391.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1082/esxi_system_information/esxi_system_information.log | Other | 4.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1082/esxi_system_information/esxi_system_information.yml | Other | 441 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1082/linux_auditd_lsmod/linux_auditd_lsmod.log | Other | 450 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1082/linux_auditd_lsmod/linux_auditd_lsmod.yml | Other | 408 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1082/linux_auditd_lsmod_new/linux_auditd_lsmod_new.yml | Other | 428 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1082/linux_auditd_lsmod_new/linux_auditd_new_lsmod.log | Other | 355 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1082/snapattack/snapattack.log | Other | 2.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1082/snapattack/snapattack.yml | Other | 635 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1082/snapattack/snapattack_linux.log | Other | 1.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1082/sysinternals_pstools/sysinternals_pstools.log | Other | 35.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1082/sysinternals_pstools/sysinternals_pstools.yml | Other | 531 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1083/linux_auditd_find_db/linux_auditd_find_db.log | Other | 2.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1083/linux_auditd_find_db/linux_auditd_find_db.yml | Other | 418 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1083/linux_auditd_find_document/auditd_execve_file_dir_discovery.log | Other | 24.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1083/linux_auditd_find_document/linux_auditd_find_document.log | Other | 5.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1083/linux_auditd_find_document/linux_auditd_find_document.yml | Other | 633 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1083/linux_auditd_find_virtual_disk/auditd_execve_find_vhd.log | Other | 2.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1083/linux_auditd_find_virtual_disk/linux_auditd_find_virtual_disk.log | Other | 879 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1083/linux_auditd_find_virtual_disk/linux_auditd_find_virtual_disk.yml | Other | 637 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1083/linux_auditd_hidden_file/auditd_execve_hidden_file.log | Other | 198 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1083/linux_auditd_hidden_file/linux_auditd_hidden_file.log | Other | 192 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1083/linux_auditd_hidden_file/linux_auditd_hidden_file.yml | Other | 607 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1083/splunk/SVD-2024-0711_web_access_splunk_web_access.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1083/splunk/path_traversal_spl_injection.log | Other | 1.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1083/splunk/splunk_absolute_path_traversal_using_runshellscript_splunk_python.log | Other | 440 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1083/splunk/splunk_path_traversal_in_splunk_app_for_lookup_file_edit.log | Other | 8.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.001/AD_discovery/AD_discovery.yml | Other | 655 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.001/AD_discovery/windows-powershell-xml.log | Other | 5.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.001/AD_discovery/windows-powershell.log | Other | 1.7 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.001/AD_discovery/windows-security.log | Other | 60.3 MB | baf6dd07c331 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.001/AD_discovery/windows-sysmon.log | Other | 17.2 MB | c244d0b1fbb7 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.002/4662_ad_enum/4662_priv_events.log | Other | 161.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.002/AD_discovery/AD_discovery.yml | Other | 1.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.002/AD_discovery/adsisearcher-powershell.log | Other | 974 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.002/AD_discovery/adsisearcher_powershell.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.002/AD_discovery/aduser_powershell.log | Other | 29.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.002/AD_discovery/windows-powershell-DomainOU-xml.log | Other | 263.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.002/AD_discovery/windows-powershell-ForestDomain-xml.log | Other | 51.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.002/AD_discovery/windows-powershell-LocalAdminAccess-xml.log | Other | 53.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.002/AD_discovery/windows-powershell-interestingACL-xml.log | Other | 95.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.002/AD_discovery/windows-powershell-xml.log | Other | 2.0 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.002/AD_discovery/windows-powershell.log | Other | 3.3 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.002/AD_discovery/windows-security.log | Other | 661.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.002/AD_discovery/windows-sysmon.log | Other | 10.9 MB | 1b78f515120a |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.002/AD_discovery/windows-system.log | Other | 1.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.002/adsi_discovery/adsi_discovery.yml | Other | 893 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.002/adsi_discovery/windows-powershell-xml.log | Other | 2.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.002/adsi_discovery/windows-powershell-xml1.log | Other | 1.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.002/adsi_discovery/windows-powershell-xml2.log | Other | 1.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.002/blackmatter_schcache/blackmatter_schcache.yml | Other | 493 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.002/blackmatter_schcache/windows-sysmon.log | Other | 52.6 MB | 3739d30840cb |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.002/snapattack/snapattack.log | Other | 2.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.002/snapattack/snapattack.yml | Other | 440 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.004/aws_invoke_model_access_denied/aws_invoke_model_access_denied_old.yml | Other | 479 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.004/azurehound/azurehound.log | Other | 22.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.004/azurehound/azurehound.yml | Other | 357 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.004/okta_unauth_access/okta_unauth_access.log | Other | 2.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087.004/okta_unauth_access/okta_unauth_access.yml | Other | 432 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087/enumerate_users_local_group_using_telegram/data.yml | Other | 504 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087/enumerate_users_local_group_using_telegram/windows-xml.log | Other | 74.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087/powerview_get_netuser_preauthnotrequire/get-netuser-not-require-pwh.log | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087/powerview_get_netuser_preauthnotrequire/powerview_get_netuser_preauthnotrequire_old.yml | Other | 553 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087/splunk/SVD-2024-0716_splunkd_splunkd.log | Other | 7.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1087/splunk/svd-2024-1005.log | Other | 5.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1090.001/netsh_portproxy/netsh_portproxy.yml | Other | 446 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1090.001/netsh_portproxy/volt_sysmon.log | Other | 308.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1090.003/pan_tor_allowed/pan_tor_allowed.log | Other | 1.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1090.003/pan_tor_allowed/pan_tor_allowed_old.yml | Other | 617 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1090.003/windows_tor_client_execution/windows-sysmon.log | Other | 1.2 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1090.003/windows_tor_client_execution/windows_tor_client_execution.yml | Other | 817 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1090/snapattack/snapattack.log | Other | 10.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1090/snapattack/snapattack.yml | Other | 409 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1095/palologs/disable_rdp_old.yml | Other | 440 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1095/palologs/large_icmp.log | Other | 4.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.001/azure_ad_federated_identity_credential/azure-audit.log | Other | 3.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.001/azure_ad_federated_identity_credential/azure_ad_federated_identity_credential.yml | Other | 807 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.001/azure_ad_service_principal_credentials/azure-audit.log | Other | 1.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.001/azure_ad_service_principal_credentials/azure_ad_service_principal_credentials.yml | Other | 583 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.001/o365_service_principal_credentials/o365_service_principal_credentials.log | Other | 5.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.001/o365_service_principal_credentials/o365_service_principal_credentials.yml | Other | 627 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.001/okta_new_api_token_created/okta_new_api_token_created.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.001/okta_new_api_token_created/okta_new_api_token_created.yml | Other | 542 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.002/application_impersonation_role_assigned/application_impersonation_role_assigned.log | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.002/application_impersonation_role_assigned/application_impersonation_role_assigned_old.yml | Other | 457 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.002/full_access_as_app_permission_assigned/full_access_as_app_permission_assigned.log | Other | 82.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.002/full_access_as_app_permission_assigned/full_access_as_app_permission_assigned.yml | Other | 531 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.002/o365_full_access_as_app_permission_assigned/o365_full_access_as_app_permission_assigned.log | Other | 6.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.002/o365_full_access_as_app_permission_assigned/o365_full_access_as_app_permission_assigned.yml | Other | 551 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.002/o365_mailbox_folder_read_granted/o365_mailbox_folder_read_granted.log | Other | 13.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.002/o365_mailbox_folder_read_granted/o365_mailbox_folder_read_granted.yml | Other | 476 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/azure_ad_admin_consent/azure_ad_admin_consent.log | Other | 16.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/azure_ad_admin_consent/azure_ad_admin_consent.yml | Other | 546 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/azure_ad_assign_global_administrator/azure-audit.log | Other | 32.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/azure_ad_assign_global_administrator/azure_ad_assign_global_administrator.yml | Other | 438 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/azure_ad_assign_privileged_role/azure-audit.log | Other | 5.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/azure_ad_assign_privileged_role/azure_ad_assign_privileged_role.yml | Other | 423 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/azure_ad_bypass_admin_consent/azure_ad_bypass_admin_consent.log | Other | 7.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/azure_ad_bypass_admin_consent/azure_ad_bypass_admin_consent.yml | Other | 498 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/azure_ad_pim_role_activated/azure-audit.log | Other | 434.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/azure_ad_pim_role_activated/azure_ad_pim_role_activated.yml | Other | 413 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/azure_ad_privileged_graph_perm_assigned/azure_ad_privileged_graph_perm_assigned.log | Other | 121.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/azure_ad_privileged_graph_perm_assigned/azure_ad_privileged_graph_perm_assigned.yml | Other | 531 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/azure_ad_privileged_role_serviceprincipal/azure-audit.log | Other | 180.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/azure_ad_privileged_role_serviceprincipal/azure_ad_privileged_role_serviceprincipal.yml | Other | 455 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/azure_ad_spn_privesc/azure_ad_spn_privesc.log | Other | 3.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/azure_ad_spn_privesc/azure_ad_spn_privesc.yml | Other | 397 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/o365_admin_consent/o365_admin_consent.log | Other | 12.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/o365_admin_consent/o365_admin_consent.yml | Other | 536 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/o365_bypass_admin_consent/o365_bypass_admin_consent.log | Other | 14.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/o365_bypass_admin_consent/o365_bypass_admin_consent.yml | Other | 488 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/o365_grant_mail_read/o365_grant_mail_read.log | Other | 13.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/o365_grant_mail_read/o365_grant_mail_read.yml | Other | 562 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/o365_high_priv_role_assigned/o365_high_priv_role_assigned.log | Other | 7.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/o365_high_priv_role_assigned/o365_high_priv_role_assigned.yml | Other | 586 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/o365_privileged_graph_perm_assigned/o365_privileged_graph_perm_assigned.log | Other | 12.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/o365_privileged_graph_perm_assigned/o365_privileged_graph_perm_assigned.yml | Other | 521 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/o365_spn_privesc/o365_spn_privesc.log | Other | 3.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.003/o365_spn_privesc/o365_spn_privesc.yml | Other | 387 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.004/auditd_path_ssh_config/auditd_path_ssh_config.yml | Other | 429 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.004/auditd_path_ssh_config/path_ssh_config.log | Other | 1.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.004/linux_auditd_nopasswd/linux_auditd_nopasswd.yml | Other | 435 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.004/linux_auditd_nopasswd/linux_auditd_ssh_config.log | Other | 918 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.004/linux_auditd_nopasswd/linux_path_ssh_config.log | Other | 227 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.004/ssh_authorized_keys/authkey_linux-sysmon.log | Other | 4.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.004/ssh_authorized_keys/ssh_authorized_keys.yml | Other | 600 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.004/ssh_authorized_keys/sysmon_linux.log | Other | 14.6 MB | 54f44dde127c |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.005/azure_ad_register_new_mfa_method/azure_ad_register_new_mfa_method.log | Other | 125.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.005/azure_ad_register_new_mfa_method/azure_ad_register_new_mfa_method.yml | Other | 578 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.005/o365_register_new_mfa_method/o365_register_new_mfa_method.log | Other | 9.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.005/o365_register_new_mfa_method/o365_register_new_mfa_method.yml | Other | 570 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.005/okta_new_device_enrolled/okta_new_device_enrolled.log | Other | 4.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098.005/okta_new_device_enrolled/okta_new_device_enrolled.yml | Other | 534 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/account_manipulation/account_manipulation.yml | Other | 433 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/account_manipulation/logAllDSInternalsModules.log | Other | 3.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/account_manipulation/logAllMimikatzModules.log | Other | 21.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/account_manipulation/logAllPowerSploitModulesWithOldNames.log | Other | 10.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/account_manipulation/xml-windows-security.log | Other | 508.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/aws_iam_delete_policy/data.yml | Other | 632 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/aws_iam_failure_group_deletion/data.yml | Other | 686 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/aws_iam_successful_group_deletion/data.yml | Other | 704 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/azure_ad_add_serviceprincipal_owner/azure-audit.log | Other | 42.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/azure_ad_add_serviceprincipal_owner/azure_ad_add_serviceprincipal_owner.yml | Other | 547 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/azure_ad_enable_and_reset/azure-audit.log | Other | 9.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/azure_ad_enable_and_reset/azure_ad_enable_and_reset.yml | Other | 567 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/azure_ad_guest_user_type_changed_to_member/azure-audit.log | Other | 2.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/azure_ad_guest_user_type_changed_to_member/azure_ad_guest_user_type_changed_to_member.yml | Other | 758 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/azure_ad_set_immutableid/azure-audit.log | Other | 1.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/azure_ad_set_immutableid/azure_ad_set_immutableid.yml | Other | 539 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/dnsadmins_member_added/dnsadmins_member_added.yml | Other | 423 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/dnsadmins_member_added/windows-security.log | Other | 340.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/dsrm_account/dsrm_account.yml | Other | 818 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/dsrm_account/windows-security-xml.log | Other | 2.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/dsrm_account/windows-security.log | Other | 608 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/dsrm_account/windows-sysmon.log | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/esxi_account_modification/esxi_account_modified.log | Other | 770 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/esxi_account_modification/esxi_account_modified.yml | Other | 441 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/esxi_admin_role/esxi_admin_role.log | Other | 306 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/esxi_admin_role/esxi_admin_role.yml | Other | 427 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/linux_password_change/linux_password_change_old.yml | Other | 496 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/linux_password_change/linux_unix_change_pwd.log | Other | 103 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/linux_usermod_root_uid_set/snapattack.yml | Other | 458 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/linux_usermod_root_uid_set/snapattack_linux.log | Other | 3.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/o365_add_app_registration_owner/o365_add_app_registration_owner.log | Other | 1.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/o365_add_app_registration_owner/o365_add_app_registration_owner.yml | Other | 590 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/o365_azure_workload_events/o365_azure_workload_events.log | Other | 24.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/o365_azure_workload_events/o365_azure_workload_events.yml | Other | 558 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/service_principal_name_added/service_principal_name_added.yml | Other | 474 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/service_principal_name_added/windows-security.log | Other | 3.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/short_lived_service_principal_name/short_lived_service_principal_name.yml | Other | 504 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/short_lived_service_principal_name/windows-security.log | Other | 6.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/snapattack/snapattack.yml | Other | 426 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/snapattack/snapattack_linux.log | Other | 1.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/windows_multiple_accounts_deleted/windows_multiple_accounts_deleted.log | Other | 251.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/windows_multiple_accounts_deleted/windows_multiple_accounts_deleted.yml | Other | 505 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/windows_multiple_accounts_disabled/windows_multiple_accounts_disabled.log | Other | 435.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/windows_multiple_accounts_disabled/windows_multiple_accounts_disabled.yml | Other | 478 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/windows_multiple_passwords_changed/windows_multiple_passwords_changed.log | Other | 687.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1098/windows_multiple_passwords_changed/windows_multiple_passwords_changed.yml | Other | 490 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1102.002/telegram_api_cli/telegram_api_cli_old.yml | Other | 895 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1102.002/telegram_api_cli/telegram_cli.log | Other | 7.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1102.002/telegram_api_dns/telegram_api_dns_old.yml | Other | 521 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1102.002/telegram_api_dns/telegram_dns.log | Other | 13.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1102/njrat_ngrok_connection/ngrok.log | Other | 5.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1102/njrat_ngrok_connection/njrat_ngrok_connection_old.yml | Other | 482 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1102/snapattack/snapattack.yml | Other | 443 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1102/snapattack/snapattack_linux.log | Other | 1.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1105/atomic_red_team/T1105-windows-security.log | Other | 122.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1105/atomic_red_team/T1105_explorer-windows-security.log | Other | 11.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1105/atomic_red_team/atomic_red_team.yml | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1105/atomic_red_team/carbon_black_events.log | Other | 1.5 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1105/atomic_red_team/curl-linux-sysmon.log | Other | 54.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1105/atomic_red_team/linux-sysmon_curlwget.log | Other | 134.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1105/atomic_red_team/windows-security.log | Other | 200.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1105/atomic_red_team/windows-sysmon.log | Other | 3.6 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1105/atomic_red_team/windows-sysmon_curl.log | Other | 254.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1105/atomic_red_team/windows-sysmon_curl_upload.log | Other | 475.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1105/atomic_red_team/winrar.log | Other | 84.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1105/dll_loaded_in_temp/dll_loaded_in_temp.yml | Other | 471 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1105/dll_loaded_in_temp/module_loaded_in_temp.log | Other | 3.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1105/download_to_pipe_exec/download_to_pipe_exec.log | Other | 35.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1105/download_to_pipe_exec/download_to_pipe_exec.yml | Other | 709 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1105/download_to_pipe_exec/download_to_pipe_exec_linux.log | Other | 1.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1105/ironlanguage_download/ironlanguage_download.log | Other | 3.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1105/ironlanguage_download/ironlanguage_download.yml | Other | 513 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1105/tinyurl_dns_query/tinyurl.log | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1105/tinyurl_dns_query/tinyurl_dns_query_old.yml | Other | 471 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.001/aws_login_failure/aws_login_failure.yml | Other | 450 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.001/azure_ad_high_number_of_failed_authentications_for_user/azure_ad_high_number_of_failed_authentications_for_user.yml | Other | 627 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.001/azure_ad_high_number_of_failed_authentications_for_user/azuread.log | Other | 105.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.001/azure_ad_successful_authentication_from_different_ips/azure_ad_successful_authentication_from_different_ips.yml | Other | 593 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.001/azure_ad_successful_authentication_from_different_ips/azuread.log | Other | 58.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.001/high_number_of_login_failures_from_a_single_source/high_number_of_login_failures_from_a_single_source_old.yml | Other | 623 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.001/o365_high_number_authentications_for_user/o365_high_number_authentications_for_user.log | Other | 34.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.001/o365_high_number_authentications_for_user/o365_high_number_authentications_for_user.yml | Other | 658 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.001/rdp_brute_sysmon/rdp_brute_sysmon.yml | Other | 423 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.001/rdp_brute_sysmon/sysmon.log | Other | 32.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.002/aws_rds_password_reset/aws_rds_password_reset.yml | Other | 662 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/aws_mulitple_failed_console_login/aws_mulitple_failed_console_login.yml | Other | 484 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/aws_multiple_login_fail_per_user/aws_multiple_login_fail_per_user_old.yml | Other | 487 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/azure_ad_distributed_spray/azure_ad_distributed_spray.log | Other | 116.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/azure_ad_distributed_spray/azure_ad_distributed_spray.yml | Other | 479 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/azuread_highrisk/azure-audit.log | Other | 5.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/azuread_highrisk/azuread_highrisk.yml | Other | 607 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/gcp_gws_multiple_login_failure/gcp_gws_multiple_login_failure.yml | Other | 440 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/generic_password_spray/password_spray_attack.log | Other | 59.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/generic_password_spray/password_spray_attack_old.yml | Other | 557 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/ntlm_bruteforce/ntlm_bruteforce.log | Other | 404.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/ntlm_bruteforce/ntlm_bruteforce_old.yml | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/o365_distributed_spray/o365_distributed_spray.log | Other | 48.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/o365_distributed_spray/o365_distributed_spray.yml | Other | 660 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/o365_multiple_users_from_ip/o365_multiple_users_from_ip.log | Other | 48.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/o365_multiple_users_from_ip/o365_multiple_users_from_ip.yml | Other | 611 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/okta_multiple_users_from_ip/okta_multiple_users_from_ip.log | Other | 31.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/okta_multiple_users_from_ip/okta_multiple_users_from_ip.yml | Other | 417 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/password_spraying_azuread/azuread_signin.log | Other | 113.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/password_spraying_azuread/password_spraying_azuread.yml | Other | 579 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_disabled_users_kerberos/purplesharp_disabled_users_kerberos_old.yml | Other | 620 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_disabled_users_kerberos/windows-security.log | Other | 359.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_disabled_users_kerberos_xml/data.yml | Other | 513 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_disabled_users_kerberos_xml/purplesharp_disabled_users_kerberos_xml | Other | 655 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_disabled_users_kerberos_xml/windows-security.log | Other | 190.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_explicit_credential_spray/purplesharp_explicit_credential_spray_old.yml | Other | 546 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_explicit_credential_spray/windows-security.log | Other | 117.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_explicit_credential_spray_xml/purplesharp_explicit_credential_spray_xml.yml | Other | 532 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_explicit_credential_spray_xml/windows-security.log | Other | 179.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_invalid_users_kerberos/purplesharp_invalid_users_kerberos_old.yml | Other | 637 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_invalid_users_kerberos/windows-security.log | Other | 307.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_invalid_users_kerberos_xml/purplesharp_invalid_users_kerberos_xml.yml | Other | 530 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_invalid_users_kerberos_xml/windows-security.log | Other | 190.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_invalid_users_ntlm/purplesharp_invalid_users_ntlm_old.yml | Other | 629 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_invalid_users_ntlm/windows-security.log | Other | 303.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_invalid_users_ntlm_xml/purplesharp_invalid_users_ntlm_xml.yml | Other | 518 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_invalid_users_ntlm_xml/windows-security.log | Other | 173.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_multiple_users_from_process/purplesharp_multiple_users_from_process_old.yml | Other | 565 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_multiple_users_from_process/windows-security.log | Other | 138.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_multiple_users_from_process_xml/purplesharp_multiple_users_from_process_xml.yml | Other | 531 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_multiple_users_from_process_xml/windows-security.log | Other | 311.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_remote_spray/purplesharp_remote_spray_old.yml | Other | 625 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_remote_spray/windows-security.log | Other | 211.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_remote_spray_xml/purplesharp_remote_spray_xml.yml | Other | 506 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_remote_spray_xml/windows-security.log | Other | 292.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_valid_users_kerberos/purplesharp_valid_users_kerberos_old.yml | Other | 567 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_valid_users_kerberos/windows-security.log | Other | 314.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_valid_users_kerberos_xml/purplesharp_valid_users_kerberos_xml.yml | Other | 526 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_valid_users_kerberos_xml/windows-security.log | Other | 195.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_valid_users_ntlm/purplesharp_valid_users_ntlm_old.yml | Other | 628 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_valid_users_ntlm/windows-security.log | Other | 298.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_valid_users_ntlm_xml/purplesharp_valid_users_ntlm_xml.yml | Other | 514 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.003/purplesharp_valid_users_ntlm_xml/windows-security.log | Other | 172.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.004/local_administrator_cred_stuffing/local_administrator_cred_stuffing.yml | Other | 612 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110.004/local_administrator_cred_stuffing/windows-security.log | Other | 180.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110/azure_mfasweep_events/azure_mfasweep_events.log | Other | 12.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110/azure_mfasweep_events/azure_mfasweep_events.yml | Other | 433 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110/esxi_ssh_brute_force/esxi_ssh_brute_force.log | Other | 5.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110/esxi_ssh_brute_force/esxi_ssh_brute_force.yml | Other | 441 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110/o365_brute_force_login/o365_brute_force_login.yml | Other | 399 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110/okta_multiple_accounts_lockout/okta_multiple_accounts_lockout.log | Other | 14.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1110/okta_multiple_accounts_lockout/okta_multiple_accounts_lockout.yml | Other | 485 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/AuthenticationLevelOverride/AuthenticationLevelOverride.yml | Other | 427 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/AuthenticationLevelOverride/auth_sys.log | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/DisableRemoteDesktopAntiAlias/DisableRemoteDesktopAntiAlias_old.yml | Other | 514 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/DisableRemoteDesktopAntiAlias/disable_remote_alias.log | Other | 2.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/T1112_old.yml | Other | 462 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/atomic_red_team/atomic_red_team.yml | Other | 1.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/atomic_red_team/safemode_windows-sysmon.log | Other | 45.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/atomic_red_team/wdigest_windows-sysmon.log | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/atomic_red_team/windows-powershell.log | Other | 8.6 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/atomic_red_team/windows-security.log | Other | 6.4 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/atomic_red_team/windows-sysmon-webview.log | Other | 42.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/atomic_red_team/windows-sysmon.log | Other | 11.7 MB | 2a54ff252b3c |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/atomic_red_team/windows-system.log | Other | 386.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/bitlocker_registry_setting/bitlocker_registry_setting_old.yml | Other | 549 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/bitlocker_registry_setting/fve-reg.log | Other | 9.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/blackbyte/enablelinkedconnections/blackbyte_sysmon.log | Other | 2.6 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/blackbyte/enablelinkedconnections/enablelinkedconnections.yml | Other | 482 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/blackbyte/longpathsenabled/longpath_sysmon.log | Other | 326.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/blackbyte/longpathsenabled/longpathsenabled.yml | Other | 459 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/delete_runmru_reg/delete_runmru_reg.yml | Other | 459 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/delete_runmru_reg/runmru_deletion.log | Other | 13.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/disable_notif_center/disable_notif_center.yml | Other | 435 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/disable_notif_center/sysmon.log | Other | 2.1 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/disable_rdp/disable_rdp_old.yml | Other | 533 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/disable_rdp/fdenytsconnection-reg.log | Other | 7.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/disablesecuritysetting.log | Other | 7.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/firewall_modify_delete/firewall-mod-delete.log | Other | 2.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/firewall_modify_delete/firewall_mod_delete.log | Other | 2.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/firewall_modify_delete/firewall_modify_delete.yml | Other | 683 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/kingsoft_reg/kingsoft_reg.log | Other | 13.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/kingsoft_reg/kingsoft_reg_old.yml | Other | 504 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/minint_reg/minint_reg.yml | Other | 380 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/minint_reg/sysmon.log | Other | 5.7 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/njrat_md5_registry_entry/njrat_md5_registry_entry_old.yml | Other | 497 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/njrat_md5_registry_entry/njrat_reg_binary.log | Other | 3.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/no_changing_wallpaper/NoChangingWallPaper.log | Other | 2.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/no_changing_wallpaper/no_changing_wallpaper_old.yml | Other | 503 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/proxy_enable/proxy_enable_old.yml | Other | 471 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/proxy_enable/proxyenable.log | Other | 12.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/proxy_server/ProxyServer_sys.log | Other | 11.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/proxy_server/proxy_server_old.yml | Other | 475 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/pwn_reg/pwn_reg.log | Other | 8.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/pwn_reg/pwn_reg_old.yml | Other | 489 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/ransomware_disable_reg/ransomware_disable_reg.yml | Other | 441 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/ransomware_disable_reg/sysmon.log | Other | 13.1 MB | a0781f5804e4 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/reg_profiles_private/reg_profiles_private.log | Other | 4.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/reg_profiles_private/reg_profiles_private.yml | Other | 458 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/reg_profiles_private2/reg_profiles_private2.log | Other | 4.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/reg_profiles_private2/reg_profiles_private2.yml | Other | 482 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/remote_access_reg/remote_access_reg.log | Other | 5.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/remote_access_reg/remote_access_reg.yml | Other | 463 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/shimcache_flush/shimcache_flush.yml | Other | 390 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/shimcache_flush/sysmon.log | Other | 5.5 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/smart_card_group_policy/scforceoption-reg.log | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/smart_card_group_policy/smart_card_group_policy_old.yml | Other | 553 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/snapattack/snapattack.log | Other | 24.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/snapattack/snapattack.yml | Other | 450 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/test_registry/test_reg.log | Other | 2.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/test_registry/test_registry_old.yml | Other | 476 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/valleyrat_c2_reg2/valleyrat_c2_reg2.log | Other | 3.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/valleyrat_c2_reg2/valleyrat_c2_reg2_old.yml | Other | 519 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/vip_big_env_variable/vip_INTERNAL_DB_CACHE.log | Other | 20.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/vip_big_env_variable/vip_big_env_variable.yml | Other | 480 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/wer_dontshowui/dontshowui_sys.log | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/wer_dontshowui/wer_dontshowui_old.yml | Other | 478 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/windows_mod_reg_risk_behavior/modify_reg_risk.log | Other | 6.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1112/windows_mod_reg_risk_behavior/windows_mod_reg_risk_behavior_old.yml | Other | 503 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1113/braodo_screenshot/braodo_screenshot.log | Other | 1.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1113/braodo_screenshot/braodo_screenshot_old.yml | Other | 527 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114.001/windows_email_files_outside_email_dir/sysmon.log | Other | 984 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114.001/windows_email_files_outside_email_dir/sysmon.yml | Other | 466 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114.002/o365_compliance_content_search_exported/o365_compliance_content_search_exported.log | Other | 16.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114.002/o365_compliance_content_search_exported/o365_compliance_content_search_exported.yml | Other | 507 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114.002/o365_compliance_content_search_started/o365_compliance_content_search_started.log | Other | 6.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114.002/o365_compliance_content_search_started/o365_compliance_content_search_started.yml | Other | 500 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114.002/o365_inbox_shared_with_all_users/o365_inbox_shared_with_all_users.log | Other | 6.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114.002/o365_inbox_shared_with_all_users/o365_inbox_shared_with_all_users.yml | Other | 573 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114.002/o365_multiple_mailboxes_accessed_via_api/o365_multiple_mailboxes_accessed_via_api.log | Other | 11.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114.002/o365_multiple_mailboxes_accessed_via_api/o365_multiple_mailboxes_accessed_via_api.yml | Other | 573 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114.002/o365_oauth_app_ews_mailbox_access/o365_oauth_app_ews_mailbox_access.log | Other | 17.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114.002/o365_oauth_app_ews_mailbox_access/o365_oauth_app_ews_mailbox_access.yml | Other | 540 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114.002/o365_oauth_app_graph_mailbox_access/o365_oauth_app_graph_mailbox_access.log | Other | 8.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114.002/o365_oauth_app_graph_mailbox_access/o365_oauth_app_graph_mailbox_access.yml | Other | 540 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114.002/suspicious_rights_delegation/suspicious_rights_delegation_old.yml | Other | 585 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114.003/o365_email_forwarding_rule_created/o365_email_forwarding_rule_created.log | Other | 8.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114.003/o365_email_forwarding_rule_created/o365_email_forwarding_rule_created.yml | Other | 484 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114.003/o365_mailbox_forwarding_enabled/o365_mailbox_forwarding_enabled.yml | Other | 476 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114.003/transport_rule_change/transport_rule_change.log | Other | 3.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114.003/transport_rule_change/transport_rule_change_old.yml | Other | 732 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114/o365_export_pst_file/o365_export_pst_file.yml | Other | 391 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114/o365_new_forwarding_mailflow_rule_created/o365_new_forwarding_mailflow_rule_created.log | Other | 4.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114/o365_new_forwarding_mailflow_rule_created/o365_new_forwarding_mailflow_rule_created.yml | Other | 513 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114/o365_suspect_email_actions/o365_exchange_suspect_events.log | Other | 175.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114/o365_suspect_email_actions/o365_messagetrace_suspect_events.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1114/o365_suspect_email_actions/o365_suspect_email_actions.yml | Other | 682 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1115/atomic_red_team/atomic_red_team_old.yml | Other | 468 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1115/atomic_red_team/linux-sysmon.log | Other | 32.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1115/linux_auditd_xclip/linux_auditd_xclip.log | Other | 280 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1115/linux_auditd_xclip/linux_auditd_xclip.yml | Other | 559 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1115/linux_auditd_xclip/linux_auditd_xclip2.log | Other | 268 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1119/aws_exfil_datasync/aws_exfil_datasync_old.yml | Other | 483 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1119/snapattack/snapattack.log | Other | 6.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1119/snapattack/snapattack.yml | Other | 436 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1119/windows_dir_piped_to_findstr_activity/snapattack.yml | Other | 485 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1119/windows_dir_piped_to_findstr_activity/snapattack_windows.log | Other | 1.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1125/salat_stealer_ffmpeg/ffmpeg_event.log | Other | 4.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1125/salat_stealer_ffmpeg/salat_stealer_ffmpeg.yml | Other | 462 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1127.001/T1127.001.yml | Other | 431 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1127.001/msbuild-windows-security.log | Other | 10.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1127.001/regsvr32_silent/powershell.log | Other | 368.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1127.001/regsvr32_silent/regsvr32_silent.yml | Other | 406 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1127.001/regsvr32_silent/sysmon.log | Other | 15.1 MB | ebe13229c08e |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1127.001/windows-sysmon.log | Other | 6.1 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1127/atomic_red_team/atomic_red_team.yml | Other | 440 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1127/atomic_red_team/windows-sysmon.log | Other | 25.9 MB | 489de09c57bf |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1127/etw_disable/etw_disable.yml | Other | 387 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1127/etw_disable/sysmon.log | Other | 9.1 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1128/snapattack/snapattack.log | Other | 1.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1128/snapattack/snapattack.yml | Other | 439 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1129/executable_shared_modules/executable_shared_modules_old.yml | Other | 483 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1129/executable_shared_modules/image_loaded_exe.log | Other | 23.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1129/linux_suspicious_gcc_invocation_building_init_shared_object/snapattack.yml | Other | 561 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1129/linux_suspicious_gcc_invocation_building_init_shared_object/snapattack_linux.log | Other | 3.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1129/snapattack/snapattack.log | Other | 9.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1129/snapattack/snapattack.yml | Other | 617 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1129/snapattack/snapattack_linux.log | Other | 1.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1133/rdp/rdp_terminalservices_old.yml | Other | 447 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1133/rdp/terminalservices-rdpclient.log | Other | 51.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1133/snapattack/snapattack.log | Other | 3.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1133/snapattack/snapattack.yml | Other | 443 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1134.001/uac_process_handle_dup/Computerdefaults_access.log | Other | 3.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1134.001/uac_process_handle_dup/uac_process_handle_dup.yml | Other | 498 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1134.005/mimikatz/mimikatz.yml | Other | 568 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1134.005/mimikatz/windows-security-xml.log | Other | 12.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1134.005/sid_history2/sid_history2.yml | Other | 530 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1134.005/sid_history2/windows-security.log | Other | 3.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1134/explorer_root_proc_cmdline/explorer_root.log | Other | 18.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1134/explorer_root_proc_cmdline/explorer_root_proc_cmdline_old.yml | Other | 496 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1134/splunk/splunk_rbac_bypass_on_indexing_preview_rest_endpoint.log | Other | 412 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1135/ipc_share_accessed/ipc_share_accessed.yml | Other | 515 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1135/ipc_share_accessed/windows-security.log | Other | 58.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1135/large_number_computer_service_tickets/large_number_computer_service_tickets.yml | Other | 605 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1135/large_number_computer_service_tickets/windows-security.log | Other | 56.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1135/net_share/net_share.yml | Other | 454 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1135/net_share/windows-sysmon.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1135/net_share_discovery_via_dir/net_share_discovery_via_dir.yml | Other | 673 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1135/net_share_discovery_via_dir/smb_access_security_xml.log | Other | 5.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1135/net_share_discovery_via_dir/smbaccess-5140-security-xml2.log | Other | 315.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1135/osquery_share_discovery/osquery.log | Other | 9.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1135/osquery_share_discovery/osquery.yml | Other | 363 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1135/powerview_sharefinder/powerview_sharefinder.yml | Other | 529 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1135/powerview_sharefinder/windows-powershell.log | Other | 2.5 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1135/rapid_authentication_multiple_hosts/rapid_authentication_multiple_hosts.yml | Other | 577 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1135/rapid_authentication_multiple_hosts/windows-security.log | Other | 2.7 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.001/atomic_red_team/4720.log | Other | 1.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.001/atomic_red_team/atomic_red_team.yml | Other | 1.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.001/atomic_red_team/windows-powershell-esxadmins.log | Other | 5.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.001/atomic_red_team/windows-powershell.log | Other | 8.6 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.001/atomic_red_team/windows-security-esxadmins.log | Other | 10.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.001/atomic_red_team/windows-security.log | Other | 6.4 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.001/atomic_red_team/windows-sysmon-esxadmins.log | Other | 8.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.001/atomic_red_team/windows-sysmon.log | Other | 11.6 MB | 334fff113e8d |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.001/atomic_red_team/windows-system.log | Other | 386.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.001/atomic_red_team/windows-xml.log | Other | 6.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.001/atomic_red_team/xml-windows-security.log | Other | 2.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.001/linux_auditd_add_user/auditd_proctitle_user_add.log | Other | 13.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.001/linux_auditd_add_user/linux_auditd_add_user.log | Other | 6.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.001/linux_auditd_add_user/linux_auditd_add_user.yml | Other | 601 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.001/linux_auditd_add_user_type/linux_auditd_add_user_type.log | Other | 243 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.001/linux_auditd_add_user_type/linux_auditd_add_user_type.yml | Other | 456 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.001/net_create_user/net_create_user_old.yml | Other | 521 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.001/net_create_user/net_user_security.log | Other | 6.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.002/snapattack/snapattack.log | Other | 4.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.002/snapattack/snapattack.yml | Other | 454 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/azure_ad_add_service_principal/azure-audit.log | Other | 19.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/azure_ad_add_service_principal/azure_ad_add_service_principal.yml | Other | 419 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/azure_ad_external_guest_user_invited/azure-audit.log | Other | 1.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/azure_ad_external_guest_user_invited/azure_ad_external_guest_user_invited.yml | Other | 515 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/azure_ad_multiple_service_principals_created/azure_ad_multiple_service_principals_created.log | Other | 50.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/azure_ad_multiple_service_principals_created/azure_ad_multiple_service_principals_created.yml | Other | 507 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/azure_automation_account/azure-activity.log | Other | 31.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/azure_automation_account/azure_automation_account.yml | Other | 507 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/o365_add_app_role_assignment_grant_user/o365_add_app_role_assignment_grant_user.yml | Other | 568 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/o365_add_service_principal/o365_add_service_principal.yml | Other | 453 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/o365_added_service_principal/o365_add_service_principal.log | Other | 40.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/o365_added_service_principal/o365_added_service_principal.yml | Other | 719 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/o365_multiple_service_principals_created/o365_multiple_service_principals_created.log | Other | 58.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/o365_multiple_service_principals_created/o365_multiple_service_principals_created.yml | Other | 493 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/o365_new_federated_domain/o365_new_federated_domain.yml | Other | 435 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/o365_new_federated_domain_added/o365_add_federated_domain.log | Other | 1.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/o365_new_federated_domain_added/o365_new_federated_domain_added.yml | Other | 668 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136.003/o365_new_federation/o365_new_federation.yml | Other | 429 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136/linux_unix_new_user/linux_new_user.log | Other | 300 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136/linux_unix_new_user/linux_unix_new_user_old.yml | Other | 466 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136/osquery_account_creation/osquery.log | Other | 11.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136/osquery_account_creation/osquery.yml | Other | 364 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136/snapattack/snapattack.log | Other | 1.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1136/snapattack/snapattack.yml | Other | 421 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1137.006/snapattack/snapattack.log | Other | 6.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1137.006/snapattack/snapattack.yml | Other | 448 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1140/atomic_red_team/atomic_red_team.yml | Other | 713 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1140/atomic_red_team/encode-windows-security.log | Other | 14.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1140/atomic_red_team/expand_windows-sysmon.log | Other | 31.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1140/atomic_red_team/windows-sysmon.log | Other | 2.7 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1140/linux_auditd_base64/auditd_execve_base64.log | Other | 2.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1140/linux_auditd_base64/linux_auditd_base64.log | Other | 439 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1140/linux_auditd_base64/linux_auditd_base64.yml | Other | 567 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1140/snapattack/snapattack.log | Other | 2.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1140/snapattack/snapattack.yml | Other | 464 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1176.001/disable_extension/disable_extension_old.yml | Other | 530 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1176.001/disable_extension/iexplore-extoff.log | Other | 8.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1185/aws_concurrent_sessions_from_different_ips/aws_concurrent_sessions_from_different_ips.yml | Other | 584 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1185/azure_ad_concurrent_sessions_from_different_ips/azure_ad_concurrent_sessions_from_different_ips.yml | Other | 697 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1185/azure_ad_concurrent_sessions_from_different_ips/azuread.log | Other | 75.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1185/browser_unusual_flag/browser_unusual_flag.yml | Other | 480 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1185/browser_unusual_flag/castle_chrome_shell32.log | Other | 18.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1185/chrome_allow_list/chrome_allow_list.yml | Other | 483 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1185/chrome_allow_list/chrome_extension_allow_list.log | Other | 14.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1185/chrome_load_extensions/chrome_load_extension.log | Other | 4.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1185/chrome_load_extensions/chrome_load_extensions.yml | Other | 486 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1185/disable_chrome_update/disable_chrome_update.log | Other | 6.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1185/disable_chrome_update/disable_chrome_update.yml | Other | 483 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1185/headlessbrowser/headless_browser_old.yml | Other | 468 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1185/headlessbrowser/headless_mockbin.log | Other | 644.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1185/o365_concurrent_sessions_from_different_ips/o365_concurrent_sessions_from_different_ips.log | Other | 12.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1185/o365_concurrent_sessions_from_different_ips/o365_concurrent_sessions_from_different_ips.yml | Other | 759 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1187/petitpotam/petitpotam.yml | Other | 624 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1187/petitpotam/windows-security.log | Other | 31.5 MB | 3a8aa2efaab1 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1187/petitpotam/windows-xml-1.log | Other | 1.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1187/petitpotam/windows-xml.log | Other | 204.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1187/snapattack/snapattack.log | Other | 9.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1187/snapattack/snapattack.yml | Other | 415 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1189/dyn_dns_site/dyn_dns_site.yml | Other | 442 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1189/dyn_dns_site/windows-sysmon.log | Other | 26.4 MB | 88001f008bc0 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1189/splunk/SVD-2024-0712_audittrail_audittrail.log | Other | 5.9 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1189/splunk/SVD-2024-0712_splunkd_ui_access_splunk_ui_access.log | Other | 3.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1189/splunk/SVD-2024-0713_json_json.log | Other | 2.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1189/splunk/SVD-2024-0714_web_access_splunk_web_access.log | Other | 1.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1189/splunk/SVD-2024-0715_splunkd_splunkd_access.log | Other | 140 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1189/splunk/SVD-2024-0717_python_log_splunk_python.log | Other | 137 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1189/splunk/splunk_csrf_in_the_ssg_kvstore_client_endpoint_data.log | Other | 5.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1189/splunk/splunk_persistent_xss_in_rapiddiag_through_user_interface_views_data.log | Other | 48.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1189/splunk/splunk_persistent_xss_via_url_validation_bypass_w_dashboard.log | Other | 1.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1189/splunk/splunk_reflected_xss_in_templates_lists_radio.log | Other | 9.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1189/splunk/splunk_reflected_xss_on_app_search_table_endpoint_splunk_web_access.log | Other | 18.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1189/splunk/splunk_stored_xss_via_data_model_objectname_field.log | Other | 1.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1189/splunk/splunk_unnecesary_file_extensions_allowed_by_lookup_table_uploads.log | Other | 1.7 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1189/splunk/splunk_xss_in_highlighted_json_events_splunkd_ui_access.log | Other | 616 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1189/splunk/splunk_xss_in_save_table_dialog_in_search_page.log | Other | 2.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1189/splunk/splunk_xss_via_view.log | Other | 530 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1189/splunk/svd-2024-1010.log | Other | 448 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1189/splunk/svd-2024-1011.log | Other | 540 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1189/xss/splunk_web_access.log | Other | 19.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/T1190.yml | Other | 396 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/adobe/adobe_old.yml | Other | 555 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/adobe/coldfusion_cve_2023_29298.log | Other | 349.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/adobe/cve_2023_29360_coldfusion.log | Other | 4.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/cisco/CVE-2026-20127/CVE-2026-20127.yml | Other | 466 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/cisco/CVE-2026-20127/auth_dummy_key.log | Other | 36.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/cisco/cisco_smart_install/cisco_ios.log | Other | 12.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/cisco/cisco_smart_install/cisco_smart_install.yml | Other | 771 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/cisco/cisco_smart_install/stream_tcp.log | Other | 1.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/cisco/iosxe/ciscocve202320198.log | Other | 1.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/cisco/iosxe/ciscoiosxe_old.yml | Other | 478 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/citrix/citrix-cve20233519.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/citrix/citrix-cve_2023_24489.log | Other | 166.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/citrix/citrix.yml | Other | 713 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/citrix/cve-2023-4966-citrix.log | Other | 266.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/citrix/nginx_kv_citrixbleed2_startwebview.log | Other | 221.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/citrix/nginx_kv_cve_2023-4966-citrix.log | Other | 333 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/citrix/suricata_citrixbleed2.log | Other | 3.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/confluence/confluence.yml | Other | 897 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/confluence/confluence_cve-2023-22515.log | Other | 3.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/confluence/confluence_vuln_trigger_cve-2023-22515.log | Other | 6.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/confluence/nginx_kv_confluence_CVE-2024-21683.log | Other | 7.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/confluence/nginx_plus_kv_confluence.log | Other | 15.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/confluence/nginx_shellservlet.log | Other | 668 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/confluence/shellservlet.log | Other | 1.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/confluence/suricata_confluence_cve-2023-22527.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/crushftp/crushftp.log | Other | 2.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/crushftp/crushftp.yml | Other | 769 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/crushftp/crushftp11_session.log | Other | 289.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/crushftp/windows-sysmon.log | Other | 1.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/f5/f5.log | Other | 760 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/f5/f5_old.yml | Other | 865 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/f5/f5_tmui.log | Other | 6.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/fortigate/fortigate_old.yml | Other | 539 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/fortigate/fortinetcve202240684.log | Other | 891 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/fortigate/web_fortinetnac.log | Other | 3.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/ivanti/ivanti.yml | Other | 1.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/ivanti/ivanti_bookmark_web_access.log | Other | 1.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/ivanti/ivanti_sentry_CVE_2023_38035.log | Other | 1.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/ivanti/ivanti_vtm_audit.log | Other | 9.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/ivanti/ivanti_vtm_nginxproxy.log | Other | 5.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/ivanti/suricata_ivanti_CVE202335078.log | Other | 2.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/ivanti/suricata_ivanti_CVE202335082.log | Other | 1.9 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/ivanti/suricata_ivanti_epm.log | Other | 3.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/ivanti/suricata_ivanti_saml.log | Other | 7.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/ivanti/suricata_ivanti_secure_connect_checkphase.log | Other | 4.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/ivanti/suricata_ivanti_secure_connect_exploitphase.log | Other | 4.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/java/confluence.log | Other | 2.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/java/java.log | Other | 3.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/java/java.yml | Other | 365 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/java/java_spawn_shell_nix.log | Other | 66.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/java/log4shell-nginx.log | Other | 46.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/jenkins/jenkins.yml | Other | 387 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/jenkins/nginx_jenkins_cve_2023_23897.log | Other | 30.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/jetbrains/jetbrains_old.yml | Other | 1.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/jetbrains/teamcity.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/jetbrains/teamcity_cve_2024_27198.log | Other | 3.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/jetbrains/teamcity_cve_2024_27199.log | Other | 6.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/jetbrains/teamcity_server_logs_2024-03-05/teamcity-activities.log | Other | 1.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/jetbrains/teamcity_server_logs_2024-03-05/teamcity-javaLogging-2024-03-05.log | Other | 29.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/jetbrains/teamcity_server_logs_2024-03-05/teamcity-server.log | Other | 45.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/juniper/juniper.yml | Other | 428 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/juniper/suricata_junos_cvemegazord.log | Other | 17.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/linux_cve-2023-33246_rocketmq_exploitation/snapattack.yml | Other | 510 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/linux_cve-2023-33246_rocketmq_exploitation/snapattack_linux.log | Other | 3.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/linux_suspicious_child_of_postgresql/snapattack.yml | Other | 493 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/linux_suspicious_child_of_postgresql/snapattack_linux.log | Other | 1.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/log4j_network_logs/log4j_network_logs.log | Other | 8.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/log4j_network_logs/log4j_network_logs_old.yml | Other | 434 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/log4j_proxy_logs/log4j_proxy_logs.log | Other | 3.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/log4j_proxy_logs/log4j_proxy_logs_old.yml | Other | 438 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/magento/magento_access_filtered.log | Other | 837.5 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/moveit/SftpServer.log | Other | 1.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/moveit/moveit_old.yml | Other | 407 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/outbound_java/linux-sysmon.log | Other | 12.0 MB | 92b164b049a2 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/outbound_java/outbound_java.yml | Other | 450 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/outbound_java/windows-security.log | Other | 22.0 MB | 538ce1324d05 |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/outbound_java/windows-sysmon.log | Other | 7.0 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/outbound_ldap/bro_conn_old.yml | Other | 417 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/papercut/papercut.yml | Other | 693 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/papercut/papercutng-app-spawn_windows-sysmon.log | Other | 28.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/papercut/papercutng-suricata.log | Other | 80.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/papercut/server.log | Other | 190.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/proxyshell/msexchangehmworker_windows-sysmon.log | Other | 66.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/proxyshell/proxyshell-risk.log | Other | 2.8 MB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/proxyshell/proxyshell.log | Other | 27.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/proxyshell/proxyshell.yml | Other | 465 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/pswa/4648_4624_pswa_pool.log | Other | 22.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/pswa/4648_pswa_pool.log | Other | 63.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/pswa/iis_pswaaccess.log | Other | 5.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/request_smuggling/nginx_request_smuggling.log | Other | 202.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/request_smuggling/nginx_scripting_tools.log | Other | 13.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/request_smuggling/request_smuggling.yml | Other | 901 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/request_smuggling/suricata_request_smuggling.log | Other | 32.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/request_smuggling/suricata_reserved_names.log | Other | 8.1 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/sap/sap.yml | Other | 549 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/sap/suricata_sapnetweaver.log | Other | 32.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/sap/windows-sysmon.log | Other | 2.3 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/screenconnect/4663_connectwise_aspx_app_extensions.log | Other | 10.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/screenconnect/connectwise_auth_suricata.log | Other | 2.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/screenconnect/nginx_screenconnect.log | Other | 524 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/screenconnect/screenconnect.yml | Other | 818 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/screenconnect/sysmon_app_extensions.log | Other | 2.2 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/sharepoint/sharepoint.yml | Other | 509 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/sharepoint/sharepointeop.log | Other | 3.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/sharepoint/spinstall0.log | Other | 7.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/sharepoint/toolpane.log | Other | 7.6 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/snapattack/snapattack.log | Other | 42.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/snapattack/snapattack.yml | Other | 627 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/snapattack/snapattack_linux.log | Other | 5.8 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/splunk/splunk_enterprise_windows_deserialization_file_partition_splunk_python.log | Other | 366 B | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/splunk/splunk_rce_via_serialized_session_payload_audittrail.log | Other | 24.4 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/splunk/web_access.log | Other | 3.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/spring4shell/all_functionrouter_http_streams.log | Other | 22.7 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/spring4shell/http_request_body_streams.log | Other | 340.0 KB | — |
| collection/v2/sources/splunk_attack_data/datasets/attack_techniques/T1190/spring4shell/java_write_jsp-linux-sysmon.log | Other | 159.4 KB | — |
License and Download
- License
- other
- Access
- No access gate
Download from Rr
Released by Rr through its official repository on Hugging Face. Read the license.
Models Trained on This Dataset
- Trained on (disclosed)Sev-4B