first

MHaggis · MHaggis · commit 811c816f221a · 2025-08-21T08:38:54.000-06:00
diff --git a/datasets/attack_techniques/T1190/cisco/cisco_smart_install/cisco_smart_install.yml b/datasets/attack_techniques/T1190/cisco/cisco_smart_install/cisco_smart_install.yml
@@ -0,0 +1,15 @@
+author: Bhavin Patel, Michael Haag, Splunk
+id: 3a7a9d5e-8f12-4b2d-a6e9-5c8b7f3e1d2a
+date: '2025-08-21'
+description: |
+  Generated datasets for Cisco Smart Install port discovery and exploitation attempts. Contains network traffic 
+  simulations targeting the Cisco Smart Install port (4786) for the following detections:
+  * Cisco Smart Install Port Discovery and Status
+environment: manual simulations in a controlled lab environment
+mitre_technique: 
+- T1190
+datasets:
+- name: cisco_smart_install_traffic
+  path: /datasets/attack_techniques/T1190/cisco_smart_install/stream_tcp.log
+  sourcetype: stream:tcp
+  source: stream:tcp
diff --git a/datasets/attack_techniques/T1190/cisco/cisco_smart_install/stream_tcp.log b/datasets/attack_techniques/T1190/cisco/cisco_smart_install/stream_tcp.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:7f6455cfe9d2ae34714f6540e19fa79f9dae20b2c7690fc6049024c299e6c7e6
+size 1528

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+version https://git-lfs.github.com/spec/v1`
	`2`	`+oid sha256:7f6455cfe9d2ae34714f6540e19fa79f9dae20b2c7690fc6049024c299e6c7e6`
	`3`	`+size 1528`