lamehug

Author: t-contreras

…ts/malware/T1007/net_start/net_start.log …re/lamehug/T1007/net_start/net_start.logdatasets/malware/T1007/net_start/net_start.log renamed to datasets/malware/lamehug/T1007/net_start/net_start.log datasets/malware/T1007/net_start/net_start.log renamed to datasets/malware/lamehug/T1007/net_start/net_start.log

@@ -8,6 +8,6 @@ mitre_technique:
 - T1007
 datasets:
 - name: net_start.log
-  path: /datasets/malware/T1007/net_start/net_start.log
+  path: /datasets/malware/lamehug/T1007/net_start/net_start.log
   sourcetype: 'XmlWinEventLog'
   source: 'XmlWinEventLog:Microsoft-Windows-Sysmon/Operational'

…ts/malware/T1007/net_start/net_start.yml …re/lamehug/T1007/net_start/net_start.ymldatasets/malware/T1007/net_start/net_start.yml renamed to datasets/malware/lamehug/T1007/net_start/net_start.yml datasets/malware/T1007/net_start/net_start.yml renamed to datasets/malware/lamehug/T1007/net_start/net_start.yml

@@ -8,6 +8,6 @@ mitre_technique:
 - T1071.004
 datasets:
 - name: huggingface.log
-  path: /datasets/malware/T1071.004/hugging_face/huggingface.log
+  path: /datasets/malware/lamehug/T1071.004/hugging_face/huggingface.log
   sourcetype: 'XmlWinEventLog'
   source: 'XmlWinEventLog:Microsoft-Windows-Sysmon/Operational'

…/T1071.004/hugging_face/hugging_face.yml …/T1071.004/hugging_face/hugging_face.ymldatasets/malware/T1071.004/hugging_face/hugging_face.yml renamed to datasets/malware/lamehug/T1071.004/hugging_face/hugging_face.yml datasets/malware/T1071.004/hugging_face/hugging_face.yml renamed to datasets/malware/lamehug/T1071.004/hugging_face/hugging_face.yml

@@ -8,6 +8,6 @@ mitre_technique:
 - T1082
 datasets:
 - name: wmic_cmd.log
-  path: /datasets/malware/T1082/wmic_cmd/wmic_cmd.log
+  path: /datasets/malware/lamehug/T1082/wmic_cmd/wmic_cmd.log
   sourcetype: 'XmlWinEventLog'
   source: 'XmlWinEventLog:Microsoft-Windows-Sysmon/Operational'

…e/T1071.004/hugging_face/huggingface.log …g/T1071.004/hugging_face/huggingface.logdatasets/malware/T1071.004/hugging_face/huggingface.log renamed to datasets/malware/lamehug/T1071.004/hugging_face/huggingface.log datasets/malware/T1071.004/hugging_face/huggingface.log renamed to datasets/malware/lamehug/T1071.004/hugging_face/huggingface.log

@@ -0,0 +1,13 @@
+author: Teoderick Contreras, Splunk
+id: 4db3d658-826f-11f0-b7e4-629be3538068
+date: '2025-08-26'
+description: Generated datasets for doc collection in attack range.
+environment: attack_range
+directory: doc_collection
+mitre_technique:
+- T1119
+datasets:
+- name: xcopy_event.log
+  path: /datasets/malware/lamehug/T1119/doc_collection/xcopy_event.log
+  sourcetype: 'XmlWinEventLog'
+  source: 'XmlWinEventLog:Microsoft-Windows-Sysmon/Operational'

…sets/malware/T1082/wmic_cmd/wmic_cmd.log …ware/lamehug/T1082/wmic_cmd/wmic_cmd.logdatasets/malware/T1082/wmic_cmd/wmic_cmd.log renamed to datasets/malware/lamehug/T1082/wmic_cmd/wmic_cmd.log datasets/malware/T1082/wmic_cmd/wmic_cmd.log renamed to datasets/malware/lamehug/T1082/wmic_cmd/wmic_cmd.log

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d0b0b5049a6cf825e21f4f17dc436e06e1dec2743e2e7fecd8a2d02efc977993
+size 252732