migration

ljstella · ljstella · commit e56e986edd5f · 2025-01-29T16:42:06.000-06:00
diff --git a/datasets/attack_techniques/T1087/splunk/svd-2024-1005.log b/datasets/attack_techniques/T1087/splunk/svd-2024-1005.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:cfc96e1d1195ba421980333c2be422b72377d8833418e4079c2d27adc729953b
+size 5392
diff --git a/datasets/attack_techniques/T1189/splunk/svd-2024-1010.log b/datasets/attack_techniques/T1189/splunk/svd-2024-1010.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:fcc925cecd705b9f94041bdc6c059f005ca47cf9c63081220971e0ec0588c4b0
+size 448
diff --git a/datasets/attack_techniques/T1189/splunk/svd-2024-1011.log b/datasets/attack_techniques/T1189/splunk/svd-2024-1011.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ba041e53da6a48d7ecc37e6396379870f90033d7b23902aa5fcfa3f4d5188bff
+size 540
diff --git a/datasets/attack_techniques/T1189/splunk/svd-2024-1011.yml b/datasets/attack_techniques/T1189/splunk/svd-2024-1011.yml
@@ -0,0 +1,11 @@
+author: Rod Soto
+id: cc99276c-bac9-24eb-726b-551bf0903fbb
+date: '2024-12-27'
+description: Manual generation of attack data 
+environment: attack_range
+dataset:
+- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1189/splunk/svd-2024-1011.log
+sourcetypes:
+- splunkd_ui_access
+references:
+- https://attack.mitre.org/techniques/T1189
diff --git a/datasets/attack_techniques/T1210/splunk/svd-2024-1001-index_internal_sourcetype_splunk_python.log b/datasets/attack_techniques/T1210/splunk/svd-2024-1001-index_internal_sourcetype_splunk_python.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ac5d01f3cc777c5ddb6266c0f652255815a13aeb3dc40587b79e0f1112b53019
+size 337
diff --git a/datasets/attack_techniques/T1210/splunk/svd-2024-1001-index_internal_sourcetype_splunkd.log b/datasets/attack_techniques/T1210/splunk/svd-2024-1001-index_internal_sourcetype_splunkd.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:6806fc3f416a4d7006a77e862d29331f038236babe102b5e525c2b75746ab84b
+size 248
diff --git a/datasets/attack_techniques/T1210/splunk/svd-2024-1001-index_internal_sourcetype_splunkd_access.log b/datasets/attack_techniques/T1210/splunk/svd-2024-1001-index_internal_sourcetype_splunkd_access.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:f552bcb48fe6945e664514a8a60d0588f71374b27ddf28a466840ece2d273a71
+size 1170
diff --git a/datasets/attack_techniques/T1210/splunk/svd-2024-1001.log b/datasets/attack_techniques/T1210/splunk/svd-2024-1001.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:8e37c9df1cd4d866fe7d2125e83a0316723552518bcdee435a3e6e34cae34798
+size 961
diff --git a/datasets/attack_techniques/T1210/splunk/svd-2024-1003-index_internal_sourcetype_splunk_python.log b/datasets/attack_techniques/T1210/splunk/svd-2024-1003-index_internal_sourcetype_splunk_python.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:a31cdf22f0f7953f612237cba77784ddc62de64e2cfdd2b7f05a63d27908ff12
+size 335
diff --git a/datasets/attack_techniques/T1210/splunk/svd-2024-1003-index_internal_sourcetype_splunkd_access.log b/datasets/attack_techniques/T1210/splunk/svd-2024-1003-index_internal_sourcetype_splunkd_access.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5ccad61ab9bdbdc4e4fa4c331ef0ad7158d23a520573823ea46f68d80d6693d8
+size 360
diff --git a/datasets/attack_techniques/T1489/splunk_kvstore_csrf/splunk_kvstore_csrf.log b/datasets/attack_techniques/T1489/splunk_kvstore_csrf/splunk_kvstore_csrf.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b73e9d0f318501643c4dd934357aafaad6929767a85216164d3f2ea3a732ce49
+size 219
diff --git a/datasets/attack_techniques/T1489/splunk_kvstore_csrf/splunk_kvstore_csrf.yml b/datasets/attack_techniques/T1489/splunk_kvstore_csrf/splunk_kvstore_csrf.yml
@@ -0,0 +1,11 @@
+author: Rod Soto, Splunk
+id: da081f1e-5648-11ef-b567-acd318091a22
+date: '2024-12-16'
+description: Generated datasets for splunk in attack range.
+environment: attack_range
+dataset:
+- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1489/splunk_kvstore_csrf/splunk_kvstore_csrf.log
+sourcetypes:
+- 'splunkd_access'
+references:
+- https://advisory.splunk.com/advisories/SVD-2024-1007
diff --git a/datasets/attack_techniques/T1552/splunk/svd-2024-1008.log b/datasets/attack_techniques/T1552/splunk/svd-2024-1008.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:45a5c9f8e4b16656bcdcc79d863b93a9b1bb627497ee28317cb181a9bd6eddf4
+size 5865
diff --git a/datasets/attack_techniques/T1552/splunk/svd-2024-1009.log b/datasets/attack_techniques/T1552/splunk/svd-2024-1009.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:2c166db004f7171e1e0c97d3b0b725e8830ac00b5580ccc90d06584ccf6d3979
+size 126

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+version https://git-lfs.github.com/spec/v1`
	`2`	`+oid sha256:cfc96e1d1195ba421980333c2be422b72377d8833418e4079c2d27adc729953b`
	`3`	`+size 5392`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+version https://git-lfs.github.com/spec/v1`
	`2`	`+oid sha256:fcc925cecd705b9f94041bdc6c059f005ca47cf9c63081220971e0ec0588c4b0`
	`3`	`+size 448`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+version https://git-lfs.github.com/spec/v1`
	`2`	`+oid sha256:ba041e53da6a48d7ecc37e6396379870f90033d7b23902aa5fcfa3f4d5188bff`
	`3`	`+size 540`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+version https://git-lfs.github.com/spec/v1`
	`2`	`+oid sha256:ac5d01f3cc777c5ddb6266c0f652255815a13aeb3dc40587b79e0f1112b53019`
	`3`	`+size 337`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+version https://git-lfs.github.com/spec/v1`
	`2`	`+oid sha256:6806fc3f416a4d7006a77e862d29331f038236babe102b5e525c2b75746ab84b`
	`3`	`+size 248`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+version https://git-lfs.github.com/spec/v1`
	`2`	`+oid sha256:f552bcb48fe6945e664514a8a60d0588f71374b27ddf28a466840ece2d273a71`
	`3`	`+size 1170`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+version https://git-lfs.github.com/spec/v1`
	`2`	`+oid sha256:8e37c9df1cd4d866fe7d2125e83a0316723552518bcdee435a3e6e34cae34798`
	`3`	`+size 961`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+version https://git-lfs.github.com/spec/v1`
	`2`	`+oid sha256:a31cdf22f0f7953f612237cba77784ddc62de64e2cfdd2b7f05a63d27908ff12`
	`3`	`+size 335`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+version https://git-lfs.github.com/spec/v1`
	`2`	`+oid sha256:5ccad61ab9bdbdc4e4fa4c331ef0ad7158d23a520573823ea46f68d80d6693d8`
	`3`	`+size 360`