add t1654 dataset

nasbench · nasbench · commit 7768bb047fb6 · 2025-04-24T14:57:58.000+02:00
diff --git a/datasets/attack_techniques/T1654/eventlog_enumeration/eventlog_enumeration.log b/datasets/attack_techniques/T1654/eventlog_enumeration/eventlog_enumeration.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b7d86de9df27311dfc987ce78cb0fc1ea1a70a479d758fad350c438065f72131
+size 18657
diff --git a/datasets/attack_techniques/T1654/eventlog_enumeration/eventlog_enumeration.yml b/datasets/attack_techniques/T1654/eventlog_enumeration/eventlog_enumeration.yml
@@ -0,0 +1,11 @@
+author: Nasreddine Bencherchali
+id: 0d34f1fc-b4f4-463c-8512-e0cb9e027cd6
+date: '2025-04-24'
+description: This dataset contains multiple events that simulate event log enumeration on a windows machine, using built-in utilities.
+environment: attack_range
+dataset:
+- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1621/eventlog_enumeration/eventlog_enumeration.yml
+sourcetypes:
+- XmlWinEventLog:Microsoft-Windows-Sysmon/Operational
+references:
+- https://attack.mitre.org/techniques/T1654

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+version https://git-lfs.github.com/spec/v1`
	`2`	`+oid sha256:b7d86de9df27311dfc987ce78cb0fc1ea1a70a479d758fad350c438065f72131`
	`3`	`+size 18657`