weaver

MHaggis · MHaggis · commit ef67bda88ce8 · 2025-04-28T11:09:24.000-06:00
diff --git a/datasets/attack_techniques/T1190/sap/sap.yml b/datasets/attack_techniques/T1190/sap/sap.yml
@@ -5,7 +5,9 @@ description: Attack data related to NetWeaver CVE-2025-31324
 environment: attack_range
 dataset:
 - https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1190/sap/suricata_sapnetweaver.log
+- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1190/sap/windows-sysmon.log
 sourcetypes:
 - suricata
+- XmlWinEventLog:Microsoft-Windows-Sysmon/Operational
 references:
   - https://attack.mitre.org/techniques/T1190
diff --git a/datasets/attack_techniques/T1190/sap/windows-sysmon.log b/datasets/attack_techniques/T1190/sap/windows-sysmon.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:f8e0bfd644360e21f49b528561e48d5482fd85f9407dab77cf13bb2d5ea57387
+size 2267

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+version https://git-lfs.github.com/spec/v1`
	`2`	`+oid sha256:f8e0bfd644360e21f49b528561e48d5482fd85f9407dab77cf13bb2d5ea57387`
	`3`	`+size 2267`