1 more

MHaggis · MHaggis · commit 7751e3d08666 · 2025-10-28T10:53:09.000-06:00
diff --git a/datasets/attack_techniques/T1195.001/npm/npm_supply_chain.yml b/datasets/attack_techniques/T1195.001/npm/npm_supply_chain.yml
@@ -10,4 +10,8 @@ datasets:
 - name: workflow_yml_sysmon_linux
   path: /datasets/attack_techniques/T1195.001/npm/workflow_yml_sysmon.log
   sourcetype: sysmon:linux
+  source: Syslog:Linux-Sysmon/Operational
+- name: shai_hulud_workflow_sysmon
+  path: /datasets/attack_techniques/T1195.001/npm/shai_hulud_workflow_sysmon.log
+  sourcetype: sysmon:linux
   source: Syslog:Linux-Sysmon/Operational
diff --git a/datasets/attack_techniques/T1195.001/npm/shai_hulud_workflow_sysmon.log b/datasets/attack_techniques/T1195.001/npm/shai_hulud_workflow_sysmon.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:23a4fb324372db0799d122661a62f342f2f5e999e28c8f619c0d003ba0c6715a
+size 17001

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+version https://git-lfs.github.com/spec/v1`
	`2`	`+oid sha256:23a4fb324372db0799d122661a62f342f2f5e999e28c8f619c0d003ba0c6715a`
	`3`	`+size 17001`