crushedFTP

MHaggis · MHaggis · commit 642d1f9ccfd5 · 2025-04-18T13:24:45.000-06:00
diff --git a/datasets/attack_techniques/T1190/crushftp/crushftp.yml b/datasets/attack_techniques/T1190/crushftp/crushftp.yml
@@ -6,8 +6,10 @@ environment: attack_range
 dataset:
 - https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1190/crushftp/crushftp.log
 - https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1190/crushftp/crushftp11_session.log
+- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1190/crushftp/windows-sysmon.log
 sourcetypes:
 - crushftp:sessionlogs
+
 references:
   - https://attack.mitre.org/techniques/T1190
   - https://github.com/airbus-cert/CVE-2024-4040
diff --git a/datasets/attack_techniques/T1190/crushftp/windows-sysmon.log b/datasets/attack_techniques/T1190/crushftp/windows-sysmon.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:2e9efea0d5421db1f9f2889ba418fc5f868fd38cb9654dc7312a9d31c0e28d0c
+size 1931

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+version https://git-lfs.github.com/spec/v1`
	`2`	`+oid sha256:2e9efea0d5421db1f9f2889ba418fc5f868fd38cb9654dc7312a9d31c0e28d0c`
	`3`	`+size 1931`