rdp

t-contreras · t-contreras · commit 9faf484e9659 · 2025-07-31T11:15:52.000+02:00
diff --git a/datasets/attack_techniques/T1021.001/rdp_session_established/4624_10_logon.log b/datasets/attack_techniques/T1021.001/rdp_session_established/4624_10_logon.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:03a9cef0403dda73c10b0b27f051e39d9dd7b3ab05514c59b1ef11fef60c56df
+size 29431
diff --git a/datasets/attack_techniques/T1021.001/rdp_session_established/rdp_session_established.yml b/datasets/attack_techniques/T1021.001/rdp_session_established/rdp_session_established.yml
@@ -0,0 +1,11 @@
+author: Teoderick Contreras, Splunk
+id: d96eb482-6dee-11f0-b544-629be3538069
+date: '2025-07-31'
+description: Generated datasets for rdp session established in attack range.
+environment: attack_range
+dataset:
+- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1021.001/rdp_session_established/4624_10_logon.log
+sourcetypes:
+- 'XmlWinEventLog:Security'
+references:
+- https://thelocalh0st.github.io/posts/rdp/

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+version https://git-lfs.github.com/spec/v1`
	`2`	`+oid sha256:03a9cef0403dda73c10b0b27f051e39d9dd7b3ab05514c59b1ef11fef60c56df`
	`3`	`+size 29431`