Merge pull request #916 from splunk/asl_new_datasets

P4T12ICK · web-flow · commit 41868f9dc30f · 2024-12-12T10:17:13.000+01:00
updated cloudtrail asl datasets
diff --git a/datasets/attack_techniques/T1098/aws_iam_delete_policy/asl_ocsf_cloudtrail.json b/datasets/attack_techniques/T1098/aws_iam_delete_policy/asl_ocsf_cloudtrail.json
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:742dde1b502eebc8b4e45adf5cd0ae057ed565e908d6d887f6a16ad970bc3b18
-size 2133
+oid sha256:a904eac8644379e46ea2a55d245e30a1779453d05f9954caf231c396f6061771
+size 2424
diff --git a/datasets/attack_techniques/T1098/aws_iam_failure_group_deletion/asl_ocsf_cloudtrail.json b/datasets/attack_techniques/T1098/aws_iam_failure_group_deletion/asl_ocsf_cloudtrail.json
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:34d03d6dc8ae4f11a52a3e12939bb1d4023a82b3eae44c2e94691a0c93a52165
-size 1785
+oid sha256:6ef2f8900380c97248f23ab8d832d1e7d3af0795e81cf9fe90786d7a58ee5adf
+size 2212
diff --git a/datasets/attack_techniques/T1098/aws_iam_successful_group_deletion/asl_ocsf_cloudtrail.json b/datasets/attack_techniques/T1098/aws_iam_successful_group_deletion/asl_ocsf_cloudtrail.json
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:9d61e1f747f76e3e3bab20bb4db1fd380fafe03295648f9cc0327151a66c9c8a
-size 2099
+oid sha256:9be77d99ae8217c4ab027b659a88a938b12ed7b37462216aba00e287ceef8b13
+size 2049
diff --git a/datasets/attack_techniques/T1204.003/aws_ecr_container_upload/asl_ocsf_cloudtrail.json b/datasets/attack_techniques/T1204.003/aws_ecr_container_upload/asl_ocsf_cloudtrail.json
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:f9a003690199e07f5c00e4c7ee30b304750c965e3da913e9ed1051fba8f71400
-size 10729
+oid sha256:16d2eaf226e564bbc09ec123b1ccbc0a451aef21f1b6e52bc1ce5b90e69892a5
+size 11783
diff --git a/datasets/attack_techniques/T1556.006/aws_new_mfa_method_registered_for_user/asl_ocsf_cloudtrail.json b/datasets/attack_techniques/T1556.006/aws_new_mfa_method_registered_for_user/asl_ocsf_cloudtrail.json
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:a8db9cc75d337c59fcc8c0ba09c8ef4a4a5f4b2e5c6de4c7284f43f8755b6da3
-size 2268
+oid sha256:a4cbcf8c6d05debe74c954569ac514110bb9346f01201c008c194da2fcad3d2f
+size 2473
diff --git a/datasets/attack_techniques/T1621/aws_mfa_disabled/asl_ocsf_cloudtrail.json b/datasets/attack_techniques/T1621/aws_mfa_disabled/asl_ocsf_cloudtrail.json
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:0601275ce78673653f8dd5fdc975c43b5c17e32d78af5d486e27d54996dac8cc
-size 4286
+oid sha256:6e7fa5d16944c96b3f08bb797a9ba2f43d3beed1269635aefa7ce96882e59a12
+size 4905
