irm

MHaggis · MHaggis · commit e14e56d93cb5 · 2025-04-17T11:46:54.000-06:00
diff --git a/datasets/attack_techniques/T1059.001/atomic_red_team/atomic_red_team.yml b/datasets/attack_techniques/T1059.001/atomic_red_team/atomic_red_team.yml
@@ -16,6 +16,7 @@ dataset:
 - https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1059.001/atomic_red_team/get_ciminstance_windows-powershell.log
 - https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1059.001/atomic_red_team/enableat_windows-sysmon.log
 - https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1059.001/atomic_red_team/enableat_windows-sysmon.log/win32_scheduledjob_windows-powershell.log
+- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1059.001/atomic_red_team/irm_powershell.log
 sourcetypes:
 - XmlWinEventLog:Microsoft-Windows-Sysmon/Operational
 - WinEventLog:Microsoft-Windows-PowerShell/Operational
diff --git a/datasets/attack_techniques/T1059.001/atomic_red_team/irm_powershell.log b/datasets/attack_techniques/T1059.001/atomic_red_team/irm_powershell.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b9112d39b0e88759dd221629b829668947521132bce155812830d29093e728ce
+size 9053

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+version https://git-lfs.github.com/spec/v1`
	`2`	`+oid sha256:b9112d39b0e88759dd221629b829668947521132bce155812830d29093e728ce`
	`3`	`+size 9053`