Add YAML metadata for T1003.003

Author: P4T12ICK

datasets/attack_techniques/T1003.003/credential-dumping-via-symlink/credential-dumping-via-symlink.yml

@@ -0,0 +1,13 @@
+author: PB
+id: 2b90ac46-ab6f-4c79-92dd-8bcf16859bab
+date: '2025-11-10'
+description: Attack data for detection Credential Dumping via Symlink to Shadow Copy
+environment: attack_range
+directory: credential-dumping-via-symlink
+mitre_technique:
+- T1003.003
+datasets:
+- name: data
+  path: datasets/attack_techniques/T1003.003/credential-dumping-via-symlink/data.log
+  sourcetype: XmlWinEventLog
+  source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational