From c11db8acfca09c2c8f52002b82797d01bd401f2a Mon Sep 17 00:00:00 2001 From: Lucas Corcodilos Date: Sat, 8 Aug 2026 21:50:38 -0400 Subject: [PATCH] Fix snaattack misspelling --- datasets/attack_techniques/T1001/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1003.001/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1003.002/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1003.003/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1003.004/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1003.005/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1003.006/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1003/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1006/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1011/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1012/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1016.001/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1020/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1021.002/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1021.004/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1021/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1022/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1027.009/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1027.010/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1027/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1030/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1033/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1036.005/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1036/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1037.005/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1047/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1053/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1055/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1057/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1059.001/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1059.003/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1059.005/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1059.006/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1059.007/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1059/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1068/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1069/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1071.001/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1071.004/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1074/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1078.001/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1078.003/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1078/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1082/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1087.002/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1090/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1112/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1119/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1128/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1129/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1133/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1136.002/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1136/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1137.006/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1140/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1187/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1190/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1203/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1204.002/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1204/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1207/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1210/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1217/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1218.007/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1218.010/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1218.011/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1218.014/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1218/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1219/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1222/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1482/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1484.001/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1485/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1490/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1491.001/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1491/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1497/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1505.003/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1505/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1518/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1526/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1542.001/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1542.003/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1543.003/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1546.008/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1546.009/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1547.001/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1547.009/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1547.012/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1552/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1553.002/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1555.003/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1556.002/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1560.002/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1562.001/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1562.004/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1562.009/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1562/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1564/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1566/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1567.002/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1567/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1569/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1570/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1572/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1574.002/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1574.008/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1574/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1589.001/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1590/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1595.001/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1595/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1608.001/snapattack/snapattack.yml | 2 +- datasets/attack_techniques/T1608/snapattack/snapattack.yml | 2 +- 114 files changed, 114 insertions(+), 114 deletions(-) diff --git a/datasets/attack_techniques/T1001/snapattack/snapattack.yml b/datasets/attack_techniques/T1001/snapattack/snapattack.yml index d03e93377..e361b435f 100644 --- a/datasets/attack_techniques/T1001/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1001/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1001/snapattack/snaattack.log + path: /datasets/attack_techniques/T1001/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1003.001/snapattack/snapattack.yml b/datasets/attack_techniques/T1003.001/snapattack/snapattack.yml index 7a72e8a08..738c91a1c 100644 --- a/datasets/attack_techniques/T1003.001/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1003.001/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1003.001/snapattack/snaattack.log + path: /datasets/attack_techniques/T1003.001/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1003.002/snapattack/snapattack.yml b/datasets/attack_techniques/T1003.002/snapattack/snapattack.yml index c7d32e738..dec75e16e 100644 --- a/datasets/attack_techniques/T1003.002/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1003.002/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-PowerShell/Operational - path: /datasets/attack_techniques/T1003.002/snapattack/snaattack.log + path: /datasets/attack_techniques/T1003.002/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1003.003/snapattack/snapattack.yml b/datasets/attack_techniques/T1003.003/snapattack/snapattack.yml index df44560f3..9544350c9 100644 --- a/datasets/attack_techniques/T1003.003/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1003.003/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1003.003/snapattack/snaattack.log + path: /datasets/attack_techniques/T1003.003/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1003.004/snapattack/snapattack.yml b/datasets/attack_techniques/T1003.004/snapattack/snapattack.yml index 3d1474a2a..23cc4b75b 100644 --- a/datasets/attack_techniques/T1003.004/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1003.004/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1003.004/snapattack/snaattack.log + path: /datasets/attack_techniques/T1003.004/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1003.005/snapattack/snapattack.yml b/datasets/attack_techniques/T1003.005/snapattack/snapattack.yml index fbb5caba7..157e8208d 100644 --- a/datasets/attack_techniques/T1003.005/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1003.005/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1003.005/snapattack/snaattack.log + path: /datasets/attack_techniques/T1003.005/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1003.006/snapattack/snapattack.yml b/datasets/attack_techniques/T1003.006/snapattack/snapattack.yml index ed474b253..e0175a3ab 100644 --- a/datasets/attack_techniques/T1003.006/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1003.006/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1003.006/snapattack/snaattack.log + path: /datasets/attack_techniques/T1003.006/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1003/snapattack/snapattack.yml b/datasets/attack_techniques/T1003/snapattack/snapattack.yml index 896f44a5f..6dcc590ae 100644 --- a/datasets/attack_techniques/T1003/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1003/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1003/snapattack/snaattack.log + path: /datasets/attack_techniques/T1003/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1006/snapattack/snapattack.yml b/datasets/attack_techniques/T1006/snapattack/snapattack.yml index c4be28bbe..2bcd87e8e 100644 --- a/datasets/attack_techniques/T1006/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1006/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1006/snapattack/snaattack.log + path: /datasets/attack_techniques/T1006/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1011/snapattack/snapattack.yml b/datasets/attack_techniques/T1011/snapattack/snapattack.yml index 409208ba7..769c81e55 100644 --- a/datasets/attack_techniques/T1011/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1011/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1011/snapattack/snaattack.log + path: /datasets/attack_techniques/T1011/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1012/snapattack/snapattack.yml b/datasets/attack_techniques/T1012/snapattack/snapattack.yml index a0f87243b..f7f3f4177 100644 --- a/datasets/attack_techniques/T1012/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1012/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1012/snapattack/snaattack.log + path: /datasets/attack_techniques/T1012/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1016.001/snapattack/snapattack.yml b/datasets/attack_techniques/T1016.001/snapattack/snapattack.yml index d00cb1e80..846e8da15 100644 --- a/datasets/attack_techniques/T1016.001/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1016.001/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1016.001/snapattack/snaattack.log + path: /datasets/attack_techniques/T1016.001/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1020/snapattack/snapattack.yml b/datasets/attack_techniques/T1020/snapattack/snapattack.yml index 029001c3a..81c385fad 100644 --- a/datasets/attack_techniques/T1020/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1020/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1020/snapattack/snaattack.log + path: /datasets/attack_techniques/T1020/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1021.002/snapattack/snapattack.yml b/datasets/attack_techniques/T1021.002/snapattack/snapattack.yml index 60aade8d0..e325c02bf 100644 --- a/datasets/attack_techniques/T1021.002/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1021.002/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1021.002/snapattack/snaattack.log + path: /datasets/attack_techniques/T1021.002/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1021.004/snapattack/snapattack.yml b/datasets/attack_techniques/T1021.004/snapattack/snapattack.yml index 555564f4e..f5f73104f 100644 --- a/datasets/attack_techniques/T1021.004/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1021.004/snapattack/snapattack.yml @@ -10,7 +10,7 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1021.004/snapattack/snaattack.log + path: /datasets/attack_techniques/T1021.004/snapattack/snapattack.log - name: snapattack_linux sourcetype: sysmon:linux source: Syslog:Linux-Sysmon/Operational diff --git a/datasets/attack_techniques/T1021/snapattack/snapattack.yml b/datasets/attack_techniques/T1021/snapattack/snapattack.yml index 68ae534b4..342171471 100644 --- a/datasets/attack_techniques/T1021/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1021/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1021/snapattack/snaattack.log + path: /datasets/attack_techniques/T1021/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1022/snapattack/snapattack.yml b/datasets/attack_techniques/T1022/snapattack/snapattack.yml index e8ec70376..85ab0ed90 100644 --- a/datasets/attack_techniques/T1022/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1022/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1022/snapattack/snaattack.log + path: /datasets/attack_techniques/T1022/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1027.009/snapattack/snapattack.yml b/datasets/attack_techniques/T1027.009/snapattack/snapattack.yml index e71fe8584..06c71c223 100644 --- a/datasets/attack_techniques/T1027.009/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1027.009/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1027.009/snapattack/snaattack.log + path: /datasets/attack_techniques/T1027.009/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1027.010/snapattack/snapattack.yml b/datasets/attack_techniques/T1027.010/snapattack/snapattack.yml index fbc373afb..dab4b823d 100644 --- a/datasets/attack_techniques/T1027.010/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1027.010/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1027.010/snapattack/snaattack.log + path: /datasets/attack_techniques/T1027.010/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1027/snapattack/snapattack.yml b/datasets/attack_techniques/T1027/snapattack/snapattack.yml index ae41a2a78..398da8754 100644 --- a/datasets/attack_techniques/T1027/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1027/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1027/snapattack/snaattack.log + path: /datasets/attack_techniques/T1027/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1030/snapattack/snapattack.yml b/datasets/attack_techniques/T1030/snapattack/snapattack.yml index 2c5c4490f..7b860b8ed 100644 --- a/datasets/attack_techniques/T1030/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1030/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-PowerShell/Operational - path: /datasets/attack_techniques/T1030/snapattack/snaattack.log + path: /datasets/attack_techniques/T1030/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1033/snapattack/snapattack.yml b/datasets/attack_techniques/T1033/snapattack/snapattack.yml index 7f4c83352..8340b2be8 100644 --- a/datasets/attack_techniques/T1033/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1033/snapattack/snapattack.yml @@ -10,7 +10,7 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1033/snapattack/snaattack.log + path: /datasets/attack_techniques/T1033/snapattack/snapattack.log - name: snapattack_linux sourcetype: sysmon:linux source: Syslog:Linux-Sysmon/Operational diff --git a/datasets/attack_techniques/T1036.005/snapattack/snapattack.yml b/datasets/attack_techniques/T1036.005/snapattack/snapattack.yml index 41164f5c7..31f07d41b 100644 --- a/datasets/attack_techniques/T1036.005/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1036.005/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1036.005/snapattack/snaattack.log + path: /datasets/attack_techniques/T1036.005/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1036/snapattack/snapattack.yml b/datasets/attack_techniques/T1036/snapattack/snapattack.yml index b3ae74fc2..ab63db7f2 100644 --- a/datasets/attack_techniques/T1036/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1036/snapattack/snapattack.yml @@ -11,7 +11,7 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1036/snapattack/snaattack.log + path: /datasets/attack_techniques/T1036/snapattack/snapattack.log - name: snapattack_linux sourcetype: sysmon:linux source: Syslog:Linux-Sysmon/Operational diff --git a/datasets/attack_techniques/T1037.005/snapattack/snapattack.yml b/datasets/attack_techniques/T1037.005/snapattack/snapattack.yml index b72be79b2..6f21c0eaa 100644 --- a/datasets/attack_techniques/T1037.005/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1037.005/snapattack/snapattack.yml @@ -11,7 +11,7 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-PowerShell/Operational - path: /datasets/attack_techniques/T1037.005/snapattack/snaattack.log + path: /datasets/attack_techniques/T1037.005/snapattack/snapattack.log - name: snapattack_linux sourcetype: sysmon:linux source: Syslog:Linux-Sysmon/Operational diff --git a/datasets/attack_techniques/T1047/snapattack/snapattack.yml b/datasets/attack_techniques/T1047/snapattack/snapattack.yml index a75612968..a61743efa 100644 --- a/datasets/attack_techniques/T1047/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1047/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1047/snapattack/snaattack.log + path: /datasets/attack_techniques/T1047/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1053/snapattack/snapattack.yml b/datasets/attack_techniques/T1053/snapattack/snapattack.yml index dc57ae3c2..9f7169536 100644 --- a/datasets/attack_techniques/T1053/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1053/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1053/snapattack/snaattack.log + path: /datasets/attack_techniques/T1053/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1055/snapattack/snapattack.yml b/datasets/attack_techniques/T1055/snapattack/snapattack.yml index ac109ca6f..e63b3fbd0 100644 --- a/datasets/attack_techniques/T1055/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1055/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1055/snapattack/snaattack.log + path: /datasets/attack_techniques/T1055/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1057/snapattack/snapattack.yml b/datasets/attack_techniques/T1057/snapattack/snapattack.yml index b6bd5007f..385861dbb 100644 --- a/datasets/attack_techniques/T1057/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1057/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-PowerShell/Operational - path: /datasets/attack_techniques/T1057/snapattack/snaattack.log + path: /datasets/attack_techniques/T1057/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1059.001/snapattack/snapattack.yml b/datasets/attack_techniques/T1059.001/snapattack/snapattack.yml index b66a17090..e4414c2e0 100644 --- a/datasets/attack_techniques/T1059.001/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1059.001/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-PowerShell/Operational - path: /datasets/attack_techniques/T1059.001/snapattack/snaattack.log + path: /datasets/attack_techniques/T1059.001/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1059.003/snapattack/snapattack.yml b/datasets/attack_techniques/T1059.003/snapattack/snapattack.yml index a5731bfce..78f45abce 100644 --- a/datasets/attack_techniques/T1059.003/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1059.003/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1059.003/snapattack/snaattack.log + path: /datasets/attack_techniques/T1059.003/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1059.005/snapattack/snapattack.yml b/datasets/attack_techniques/T1059.005/snapattack/snapattack.yml index 01a41290d..442c385f6 100644 --- a/datasets/attack_techniques/T1059.005/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1059.005/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1059.005/snapattack/snaattack.log + path: /datasets/attack_techniques/T1059.005/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1059.006/snapattack/snapattack.yml b/datasets/attack_techniques/T1059.006/snapattack/snapattack.yml index a94520e03..da9ac3471 100644 --- a/datasets/attack_techniques/T1059.006/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1059.006/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1059.006/snapattack/snaattack.log + path: /datasets/attack_techniques/T1059.006/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1059.007/snapattack/snapattack.yml b/datasets/attack_techniques/T1059.007/snapattack/snapattack.yml index b901c7311..3dc80d09c 100644 --- a/datasets/attack_techniques/T1059.007/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1059.007/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1059.007/snapattack/snaattack.log + path: /datasets/attack_techniques/T1059.007/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1059/snapattack/snapattack.yml b/datasets/attack_techniques/T1059/snapattack/snapattack.yml index 3a50d5877..26ad8191f 100644 --- a/datasets/attack_techniques/T1059/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1059/snapattack/snapattack.yml @@ -11,7 +11,7 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1059/snapattack/snaattack.log + path: /datasets/attack_techniques/T1059/snapattack/snapattack.log - name: snapattack_linux sourcetype: sysmon:linux source: Syslog:Linux-Sysmon/Operational diff --git a/datasets/attack_techniques/T1068/snapattack/snapattack.yml b/datasets/attack_techniques/T1068/snapattack/snapattack.yml index 9d4ee433a..b2184c0b7 100644 --- a/datasets/attack_techniques/T1068/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1068/snapattack/snapattack.yml @@ -11,7 +11,7 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1068/snapattack/snaattack.log + path: /datasets/attack_techniques/T1068/snapattack/snapattack.log - name: snapattack_linux sourcetype: sysmon:linux source: Syslog:Linux-Sysmon/Operational diff --git a/datasets/attack_techniques/T1069/snapattack/snapattack.yml b/datasets/attack_techniques/T1069/snapattack/snapattack.yml index 699d0ef90..6bd6c2330 100644 --- a/datasets/attack_techniques/T1069/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1069/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1069/snapattack/snaattack.log + path: /datasets/attack_techniques/T1069/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1071.001/snapattack/snapattack.yml b/datasets/attack_techniques/T1071.001/snapattack/snapattack.yml index 79c865880..9798060fc 100644 --- a/datasets/attack_techniques/T1071.001/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1071.001/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1071.001/snapattack/snaattack.log + path: /datasets/attack_techniques/T1071.001/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1071.004/snapattack/snapattack.yml b/datasets/attack_techniques/T1071.004/snapattack/snapattack.yml index 578276164..f8ed455ca 100644 --- a/datasets/attack_techniques/T1071.004/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1071.004/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1071.004/snapattack/snaattack.log + path: /datasets/attack_techniques/T1071.004/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1074/snapattack/snapattack.yml b/datasets/attack_techniques/T1074/snapattack/snapattack.yml index 0597ae8ee..3175af107 100644 --- a/datasets/attack_techniques/T1074/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1074/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1074/snapattack/snaattack.log + path: /datasets/attack_techniques/T1074/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1078.001/snapattack/snapattack.yml b/datasets/attack_techniques/T1078.001/snapattack/snapattack.yml index b103510ea..ba213823b 100644 --- a/datasets/attack_techniques/T1078.001/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1078.001/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1078.001/snapattack/snaattack.log + path: /datasets/attack_techniques/T1078.001/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1078.003/snapattack/snapattack.yml b/datasets/attack_techniques/T1078.003/snapattack/snapattack.yml index 8a08be3a8..0fa1cf888 100644 --- a/datasets/attack_techniques/T1078.003/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1078.003/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1078.003/snapattack/snaattack.log + path: /datasets/attack_techniques/T1078.003/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1078/snapattack/snapattack.yml b/datasets/attack_techniques/T1078/snapattack/snapattack.yml index ab45aba06..dfb76093c 100644 --- a/datasets/attack_techniques/T1078/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1078/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-PowerShell/Operational - path: /datasets/attack_techniques/T1078/snapattack/snaattack.log + path: /datasets/attack_techniques/T1078/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1082/snapattack/snapattack.yml b/datasets/attack_techniques/T1082/snapattack/snapattack.yml index 1423ff2af..b2ff91998 100644 --- a/datasets/attack_techniques/T1082/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1082/snapattack/snapattack.yml @@ -11,7 +11,7 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-PowerShell/Operational - path: /datasets/attack_techniques/T1082/snapattack/snaattack.log + path: /datasets/attack_techniques/T1082/snapattack/snapattack.log - name: snapattack_linux sourcetype: sysmon:linux source: Syslog:Linux-Sysmon/Operational diff --git a/datasets/attack_techniques/T1087.002/snapattack/snapattack.yml b/datasets/attack_techniques/T1087.002/snapattack/snapattack.yml index bc517826f..6089fd2be 100644 --- a/datasets/attack_techniques/T1087.002/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1087.002/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1087.002/snapattack/snaattack.log + path: /datasets/attack_techniques/T1087.002/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1090/snapattack/snapattack.yml b/datasets/attack_techniques/T1090/snapattack/snapattack.yml index cbaa2334a..90f75ee0e 100644 --- a/datasets/attack_techniques/T1090/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1090/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1090/snapattack/snaattack.log + path: /datasets/attack_techniques/T1090/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1112/snapattack/snapattack.yml b/datasets/attack_techniques/T1112/snapattack/snapattack.yml index f23a435e9..85e24087c 100644 --- a/datasets/attack_techniques/T1112/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1112/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1112/snapattack/snaattack.log + path: /datasets/attack_techniques/T1112/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1119/snapattack/snapattack.yml b/datasets/attack_techniques/T1119/snapattack/snapattack.yml index 83834b7d1..d585055e5 100644 --- a/datasets/attack_techniques/T1119/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1119/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1119/snapattack/snaattack.log + path: /datasets/attack_techniques/T1119/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1128/snapattack/snapattack.yml b/datasets/attack_techniques/T1128/snapattack/snapattack.yml index b4e5936ab..03ce51fdb 100644 --- a/datasets/attack_techniques/T1128/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1128/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1128/snapattack/snaattack.log + path: /datasets/attack_techniques/T1128/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1129/snapattack/snapattack.yml b/datasets/attack_techniques/T1129/snapattack/snapattack.yml index 261cabb72..efd1eb76b 100644 --- a/datasets/attack_techniques/T1129/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1129/snapattack/snapattack.yml @@ -10,7 +10,7 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1129/snapattack/snaattack.log + path: /datasets/attack_techniques/T1129/snapattack/snapattack.log - name: snapattack_linux sourcetype: sysmon:linux source: Syslog:Linux-Sysmon/Operational diff --git a/datasets/attack_techniques/T1133/snapattack/snapattack.yml b/datasets/attack_techniques/T1133/snapattack/snapattack.yml index ce2c7873d..c1090a5f8 100644 --- a/datasets/attack_techniques/T1133/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1133/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1133/snapattack/snaattack.log + path: /datasets/attack_techniques/T1133/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1136.002/snapattack/snapattack.yml b/datasets/attack_techniques/T1136.002/snapattack/snapattack.yml index 32f2e6949..fc5388c50 100644 --- a/datasets/attack_techniques/T1136.002/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1136.002/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1136.002/snapattack/snaattack.log + path: /datasets/attack_techniques/T1136.002/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1136/snapattack/snapattack.yml b/datasets/attack_techniques/T1136/snapattack/snapattack.yml index 4663e8c48..e597276c9 100644 --- a/datasets/attack_techniques/T1136/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1136/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1136/snapattack/snaattack.log + path: /datasets/attack_techniques/T1136/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1137.006/snapattack/snapattack.yml b/datasets/attack_techniques/T1137.006/snapattack/snapattack.yml index d135616f4..f30009cff 100644 --- a/datasets/attack_techniques/T1137.006/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1137.006/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1137.006/snapattack/snaattack.log + path: /datasets/attack_techniques/T1137.006/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1140/snapattack/snapattack.yml b/datasets/attack_techniques/T1140/snapattack/snapattack.yml index 916f6cd57..0c9055416 100644 --- a/datasets/attack_techniques/T1140/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1140/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-PowerShell/Operational - path: /datasets/attack_techniques/T1140/snapattack/snaattack.log + path: /datasets/attack_techniques/T1140/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1187/snapattack/snapattack.yml b/datasets/attack_techniques/T1187/snapattack/snapattack.yml index 1f8ff0111..cddf2a922 100644 --- a/datasets/attack_techniques/T1187/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1187/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1187/snapattack/snaattack.log + path: /datasets/attack_techniques/T1187/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1190/snapattack/snapattack.yml b/datasets/attack_techniques/T1190/snapattack/snapattack.yml index f083f697f..eba0733d2 100644 --- a/datasets/attack_techniques/T1190/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1190/snapattack/snapattack.yml @@ -11,7 +11,7 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1190/snapattack/snaattack.log + path: /datasets/attack_techniques/T1190/snapattack/snapattack.log - name: snapattack_linux sourcetype: sysmon:linux source: Syslog:Linux-Sysmon/Operational diff --git a/datasets/attack_techniques/T1203/snapattack/snapattack.yml b/datasets/attack_techniques/T1203/snapattack/snapattack.yml index 4dc74227b..d0ef8c2f1 100644 --- a/datasets/attack_techniques/T1203/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1203/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1203/snapattack/snaattack.log + path: /datasets/attack_techniques/T1203/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1204.002/snapattack/snapattack.yml b/datasets/attack_techniques/T1204.002/snapattack/snapattack.yml index d829b3a9e..766c6d167 100644 --- a/datasets/attack_techniques/T1204.002/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1204.002/snapattack/snapattack.yml @@ -11,7 +11,7 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1204.002/snapattack/snaattack.log + path: /datasets/attack_techniques/T1204.002/snapattack/snapattack.log - name: snapattack_linux sourcetype: sysmon:linux source: Syslog:Linux-Sysmon/Operational diff --git a/datasets/attack_techniques/T1204/snapattack/snapattack.yml b/datasets/attack_techniques/T1204/snapattack/snapattack.yml index 6c9910409..095a03e75 100644 --- a/datasets/attack_techniques/T1204/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1204/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1204/snapattack/snaattack.log + path: /datasets/attack_techniques/T1204/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1207/snapattack/snapattack.yml b/datasets/attack_techniques/T1207/snapattack/snapattack.yml index acc23c0d9..b52ef4e16 100644 --- a/datasets/attack_techniques/T1207/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1207/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1207/snapattack/snaattack.log + path: /datasets/attack_techniques/T1207/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1210/snapattack/snapattack.yml b/datasets/attack_techniques/T1210/snapattack/snapattack.yml index a3fe056f7..d657fe6d8 100644 --- a/datasets/attack_techniques/T1210/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1210/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1210/snapattack/snaattack.log + path: /datasets/attack_techniques/T1210/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1217/snapattack/snapattack.yml b/datasets/attack_techniques/T1217/snapattack/snapattack.yml index 129759a8e..a98e59cf1 100644 --- a/datasets/attack_techniques/T1217/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1217/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1217/snapattack/snaattack.log + path: /datasets/attack_techniques/T1217/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1218.007/snapattack/snapattack.yml b/datasets/attack_techniques/T1218.007/snapattack/snapattack.yml index 0acaebc32..2d39197ed 100644 --- a/datasets/attack_techniques/T1218.007/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1218.007/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1218.007/snapattack/snaattack.log + path: /datasets/attack_techniques/T1218.007/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1218.010/snapattack/snapattack.yml b/datasets/attack_techniques/T1218.010/snapattack/snapattack.yml index a1e631dae..b855295bc 100644 --- a/datasets/attack_techniques/T1218.010/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1218.010/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1218.010/snapattack/snaattack.log + path: /datasets/attack_techniques/T1218.010/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1218.011/snapattack/snapattack.yml b/datasets/attack_techniques/T1218.011/snapattack/snapattack.yml index 207696262..d5e3bafe7 100644 --- a/datasets/attack_techniques/T1218.011/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1218.011/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1218.011/snapattack/snaattack.log + path: /datasets/attack_techniques/T1218.011/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1218.014/snapattack/snapattack.yml b/datasets/attack_techniques/T1218.014/snapattack/snapattack.yml index 2116d824b..01e776497 100644 --- a/datasets/attack_techniques/T1218.014/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1218.014/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1218.014/snapattack/snaattack.log + path: /datasets/attack_techniques/T1218.014/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1218/snapattack/snapattack.yml b/datasets/attack_techniques/T1218/snapattack/snapattack.yml index 91be58680..038acb58b 100644 --- a/datasets/attack_techniques/T1218/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1218/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1218/snapattack/snaattack.log + path: /datasets/attack_techniques/T1218/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1219/snapattack/snapattack.yml b/datasets/attack_techniques/T1219/snapattack/snapattack.yml index aefcb8fc3..1351306f2 100644 --- a/datasets/attack_techniques/T1219/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1219/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-PowerShell/Operational - path: /datasets/attack_techniques/T1219/snapattack/snaattack.log + path: /datasets/attack_techniques/T1219/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1222/snapattack/snapattack.yml b/datasets/attack_techniques/T1222/snapattack/snapattack.yml index d93b656da..ba26d00ae 100644 --- a/datasets/attack_techniques/T1222/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1222/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1222/snapattack/snaattack.log + path: /datasets/attack_techniques/T1222/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1482/snapattack/snapattack.yml b/datasets/attack_techniques/T1482/snapattack/snapattack.yml index 6b735d75a..5418b3d42 100644 --- a/datasets/attack_techniques/T1482/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1482/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-PowerShell/Operational - path: /datasets/attack_techniques/T1482/snapattack/snaattack.log + path: /datasets/attack_techniques/T1482/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1484.001/snapattack/snapattack.yml b/datasets/attack_techniques/T1484.001/snapattack/snapattack.yml index 2df1c9ff7..6b091e9b3 100644 --- a/datasets/attack_techniques/T1484.001/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1484.001/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1484.001/snapattack/snaattack.log + path: /datasets/attack_techniques/T1484.001/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1485/snapattack/snapattack.yml b/datasets/attack_techniques/T1485/snapattack/snapattack.yml index c1f8ca615..bf1376a28 100644 --- a/datasets/attack_techniques/T1485/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1485/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1485/snapattack/snaattack.log + path: /datasets/attack_techniques/T1485/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1490/snapattack/snapattack.yml b/datasets/attack_techniques/T1490/snapattack/snapattack.yml index b6c7c136a..576b80085 100644 --- a/datasets/attack_techniques/T1490/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1490/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1490/snapattack/snaattack.log + path: /datasets/attack_techniques/T1490/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1491.001/snapattack/snapattack.yml b/datasets/attack_techniques/T1491.001/snapattack/snapattack.yml index 883baeeb6..b76f2eb8c 100644 --- a/datasets/attack_techniques/T1491.001/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1491.001/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1491.001/snapattack/snaattack.log + path: /datasets/attack_techniques/T1491.001/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1491/snapattack/snapattack.yml b/datasets/attack_techniques/T1491/snapattack/snapattack.yml index ae402f5ca..355474c40 100644 --- a/datasets/attack_techniques/T1491/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1491/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1491/snapattack/snaattack.log + path: /datasets/attack_techniques/T1491/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1497/snapattack/snapattack.yml b/datasets/attack_techniques/T1497/snapattack/snapattack.yml index e780c0f53..d4e8ce8dd 100644 --- a/datasets/attack_techniques/T1497/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1497/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1497/snapattack/snaattack.log + path: /datasets/attack_techniques/T1497/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1505.003/snapattack/snapattack.yml b/datasets/attack_techniques/T1505.003/snapattack/snapattack.yml index 08fff27f8..051d97c6d 100644 --- a/datasets/attack_techniques/T1505.003/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1505.003/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1505.003/snapattack/snaattack.log + path: /datasets/attack_techniques/T1505.003/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1505/snapattack/snapattack.yml b/datasets/attack_techniques/T1505/snapattack/snapattack.yml index 1de1eea51..bdbb5eb4c 100644 --- a/datasets/attack_techniques/T1505/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1505/snapattack/snapattack.yml @@ -11,7 +11,7 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1505/snapattack/snaattack.log + path: /datasets/attack_techniques/T1505/snapattack/snapattack.log - name: snapattack_linux sourcetype: sysmon:linux source: Syslog:Linux-Sysmon/Operational diff --git a/datasets/attack_techniques/T1518/snapattack/snapattack.yml b/datasets/attack_techniques/T1518/snapattack/snapattack.yml index 9cab0e101..3190f16c5 100644 --- a/datasets/attack_techniques/T1518/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1518/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-PowerShell/Operational - path: /datasets/attack_techniques/T1518/snapattack/snaattack.log + path: /datasets/attack_techniques/T1518/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1526/snapattack/snapattack.yml b/datasets/attack_techniques/T1526/snapattack/snapattack.yml index 1947670d2..e4278c271 100644 --- a/datasets/attack_techniques/T1526/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1526/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1526/snapattack/snaattack.log + path: /datasets/attack_techniques/T1526/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1542.001/snapattack/snapattack.yml b/datasets/attack_techniques/T1542.001/snapattack/snapattack.yml index 08b337c5d..0bf50003f 100644 --- a/datasets/attack_techniques/T1542.001/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1542.001/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1542.001/snapattack/snaattack.log + path: /datasets/attack_techniques/T1542.001/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1542.003/snapattack/snapattack.yml b/datasets/attack_techniques/T1542.003/snapattack/snapattack.yml index 32f81b0c3..ca7757ec5 100644 --- a/datasets/attack_techniques/T1542.003/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1542.003/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1542.003/snapattack/snaattack.log + path: /datasets/attack_techniques/T1542.003/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1543.003/snapattack/snapattack.yml b/datasets/attack_techniques/T1543.003/snapattack/snapattack.yml index fe36f8ea7..7d2730bd7 100644 --- a/datasets/attack_techniques/T1543.003/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1543.003/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1543.003/snapattack/snaattack.log + path: /datasets/attack_techniques/T1543.003/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1546.008/snapattack/snapattack.yml b/datasets/attack_techniques/T1546.008/snapattack/snapattack.yml index 482755204..7c2e43985 100644 --- a/datasets/attack_techniques/T1546.008/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1546.008/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1546.008/snapattack/snaattack.log + path: /datasets/attack_techniques/T1546.008/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1546.009/snapattack/snapattack.yml b/datasets/attack_techniques/T1546.009/snapattack/snapattack.yml index ed6ad44e0..599e7f191 100644 --- a/datasets/attack_techniques/T1546.009/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1546.009/snapattack/snapattack.yml @@ -10,7 +10,7 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1546.009/snapattack/snaattack.log + path: /datasets/attack_techniques/T1546.009/snapattack/snapattack.log - name: registry_entry sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational diff --git a/datasets/attack_techniques/T1547.001/snapattack/snapattack.yml b/datasets/attack_techniques/T1547.001/snapattack/snapattack.yml index 457a9f8cb..d5b663394 100644 --- a/datasets/attack_techniques/T1547.001/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1547.001/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1547.001/snapattack/snaattack.log + path: /datasets/attack_techniques/T1547.001/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1547.009/snapattack/snapattack.yml b/datasets/attack_techniques/T1547.009/snapattack/snapattack.yml index a131bd6ac..a462ef873 100644 --- a/datasets/attack_techniques/T1547.009/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1547.009/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1547.009/snapattack/snaattack.log + path: /datasets/attack_techniques/T1547.009/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1547.012/snapattack/snapattack.yml b/datasets/attack_techniques/T1547.012/snapattack/snapattack.yml index a2b840398..4e90a149e 100644 --- a/datasets/attack_techniques/T1547.012/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1547.012/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1547.012/snapattack/snaattack.log + path: /datasets/attack_techniques/T1547.012/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1552/snapattack/snapattack.yml b/datasets/attack_techniques/T1552/snapattack/snapattack.yml index 2311f8880..9bef9b822 100644 --- a/datasets/attack_techniques/T1552/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1552/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-PowerShell/Operational - path: /datasets/attack_techniques/T1552/snapattack/snaattack.log + path: /datasets/attack_techniques/T1552/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1553.002/snapattack/snapattack.yml b/datasets/attack_techniques/T1553.002/snapattack/snapattack.yml index 92cc14da1..f3e37f8fd 100644 --- a/datasets/attack_techniques/T1553.002/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1553.002/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1553.002/snapattack/snaattack.log + path: /datasets/attack_techniques/T1553.002/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1555.003/snapattack/snapattack.yml b/datasets/attack_techniques/T1555.003/snapattack/snapattack.yml index 3f0ced9bc..67a69164f 100644 --- a/datasets/attack_techniques/T1555.003/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1555.003/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1555.003/snapattack/snaattack.log + path: /datasets/attack_techniques/T1555.003/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1556.002/snapattack/snapattack.yml b/datasets/attack_techniques/T1556.002/snapattack/snapattack.yml index 2921b9b67..5dd2948bb 100644 --- a/datasets/attack_techniques/T1556.002/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1556.002/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1556.002/snapattack/snaattack.log + path: /datasets/attack_techniques/T1556.002/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1560.002/snapattack/snapattack.yml b/datasets/attack_techniques/T1560.002/snapattack/snapattack.yml index 7ecdd49eb..cc153943c 100644 --- a/datasets/attack_techniques/T1560.002/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1560.002/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1560.002/snapattack/snaattack.log + path: /datasets/attack_techniques/T1560.002/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1562.001/snapattack/snapattack.yml b/datasets/attack_techniques/T1562.001/snapattack/snapattack.yml index 9338a94a3..f9bfd8955 100644 --- a/datasets/attack_techniques/T1562.001/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1562.001/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1562.001/snapattack/snaattack.log + path: /datasets/attack_techniques/T1562.001/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1562.004/snapattack/snapattack.yml b/datasets/attack_techniques/T1562.004/snapattack/snapattack.yml index f2f70b44e..a2561e225 100644 --- a/datasets/attack_techniques/T1562.004/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1562.004/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1562.004/snapattack/snaattack.log + path: /datasets/attack_techniques/T1562.004/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1562.009/snapattack/snapattack.yml b/datasets/attack_techniques/T1562.009/snapattack/snapattack.yml index 15b73781b..f2f4f88a7 100644 --- a/datasets/attack_techniques/T1562.009/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1562.009/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1562.009/snapattack/snaattack.log + path: /datasets/attack_techniques/T1562.009/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1562/snapattack/snapattack.yml b/datasets/attack_techniques/T1562/snapattack/snapattack.yml index f6869eb74..b027551b7 100644 --- a/datasets/attack_techniques/T1562/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1562/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-PowerShell/Operational - path: /datasets/attack_techniques/T1562/snapattack/snaattack.log + path: /datasets/attack_techniques/T1562/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1564/snapattack/snapattack.yml b/datasets/attack_techniques/T1564/snapattack/snapattack.yml index d9b0a72b4..1c94d17fa 100644 --- a/datasets/attack_techniques/T1564/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1564/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1564/snapattack/snaattack.log + path: /datasets/attack_techniques/T1564/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1566/snapattack/snapattack.yml b/datasets/attack_techniques/T1566/snapattack/snapattack.yml index 3e64132a8..3488741a3 100644 --- a/datasets/attack_techniques/T1566/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1566/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1566/snapattack/snaattack.log + path: /datasets/attack_techniques/T1566/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1567.002/snapattack/snapattack.yml b/datasets/attack_techniques/T1567.002/snapattack/snapattack.yml index a15188b3d..19b121a1e 100644 --- a/datasets/attack_techniques/T1567.002/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1567.002/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1567.002/snapattack/snaattack.log + path: /datasets/attack_techniques/T1567.002/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1567/snapattack/snapattack.yml b/datasets/attack_techniques/T1567/snapattack/snapattack.yml index 57d9aa16d..1c74ecf21 100644 --- a/datasets/attack_techniques/T1567/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1567/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1567/snapattack/snaattack.log + path: /datasets/attack_techniques/T1567/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1569/snapattack/snapattack.yml b/datasets/attack_techniques/T1569/snapattack/snapattack.yml index a842fad03..d5e48a203 100644 --- a/datasets/attack_techniques/T1569/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1569/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1569/snapattack/snaattack.log + path: /datasets/attack_techniques/T1569/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1570/snapattack/snapattack.yml b/datasets/attack_techniques/T1570/snapattack/snapattack.yml index 109c957b3..41fa315ed 100644 --- a/datasets/attack_techniques/T1570/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1570/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1570/snapattack/snaattack.log + path: /datasets/attack_techniques/T1570/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1572/snapattack/snapattack.yml b/datasets/attack_techniques/T1572/snapattack/snapattack.yml index 8873e0d98..81d1a5ba9 100644 --- a/datasets/attack_techniques/T1572/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1572/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1572/snapattack/snaattack.log + path: /datasets/attack_techniques/T1572/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1574.002/snapattack/snapattack.yml b/datasets/attack_techniques/T1574.002/snapattack/snapattack.yml index addb98ed1..0a3476313 100644 --- a/datasets/attack_techniques/T1574.002/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1574.002/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1574.002/snapattack/snaattack.log + path: /datasets/attack_techniques/T1574.002/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1574.008/snapattack/snapattack.yml b/datasets/attack_techniques/T1574.008/snapattack/snapattack.yml index a40eb4a12..347911238 100644 --- a/datasets/attack_techniques/T1574.008/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1574.008/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1574.008/snapattack/snaattack.log + path: /datasets/attack_techniques/T1574.008/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1574/snapattack/snapattack.yml b/datasets/attack_techniques/T1574/snapattack/snapattack.yml index 8d2b04447..56f77e85a 100644 --- a/datasets/attack_techniques/T1574/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1574/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1574/snapattack/snaattack.log + path: /datasets/attack_techniques/T1574/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1589.001/snapattack/snapattack.yml b/datasets/attack_techniques/T1589.001/snapattack/snapattack.yml index 10546784b..6ac3a0cba 100644 --- a/datasets/attack_techniques/T1589.001/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1589.001/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1589.001/snapattack/snaattack.log + path: /datasets/attack_techniques/T1589.001/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1590/snapattack/snapattack.yml b/datasets/attack_techniques/T1590/snapattack/snapattack.yml index 3207f49b1..f5937eef8 100644 --- a/datasets/attack_techniques/T1590/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1590/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-PowerShell/Operational - path: /datasets/attack_techniques/T1590/snapattack/snaattack.log + path: /datasets/attack_techniques/T1590/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1595.001/snapattack/snapattack.yml b/datasets/attack_techniques/T1595.001/snapattack/snapattack.yml index bd4898c49..e0c99e30e 100644 --- a/datasets/attack_techniques/T1595.001/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1595.001/snapattack/snapattack.yml @@ -11,4 +11,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1595.001/snapattack/snaattack.log + path: /datasets/attack_techniques/T1595.001/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1595/snapattack/snapattack.yml b/datasets/attack_techniques/T1595/snapattack/snapattack.yml index 898f05a59..a373accb4 100644 --- a/datasets/attack_techniques/T1595/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1595/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Security - path: /datasets/attack_techniques/T1595/snapattack/snaattack.log + path: /datasets/attack_techniques/T1595/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1608.001/snapattack/snapattack.yml b/datasets/attack_techniques/T1608.001/snapattack/snapattack.yml index b7ad3af9e..1e161ca68 100644 --- a/datasets/attack_techniques/T1608.001/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1608.001/snapattack/snapattack.yml @@ -10,4 +10,4 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1608.001/snapattack/snaattack.log + path: /datasets/attack_techniques/T1608.001/snapattack/snapattack.log diff --git a/datasets/attack_techniques/T1608/snapattack/snapattack.yml b/datasets/attack_techniques/T1608/snapattack/snapattack.yml index d8867bedf..dbd34443b 100644 --- a/datasets/attack_techniques/T1608/snapattack/snapattack.yml +++ b/datasets/attack_techniques/T1608/snapattack/snapattack.yml @@ -10,7 +10,7 @@ datasets: - name: snapattack sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - path: /datasets/attack_techniques/T1608/snapattack/snaattack.log + path: /datasets/attack_techniques/T1608/snapattack/snapattack.log - name: snapattack_linux sourcetype: sysmon:linux source: Syslog:Linux-Sysmon/Operational