blankgrabber

datasets/attack_techniques/T1012/backup_product_key_registry/backup_product_key_registry.yml

@@ -0,0 +1,13 @@
+author: Teoderick Contreras, Splunk
+id: af95e1a6-196c-11f1-a72e-629be353806a
+date: '2026-03-06'
+description: Generated datasets for backup product key registry in attack range.
+environment: attack_range
+directory: backup_product_key_registry
+mitre_technique:
+- T1012
+datasets:
+- name: backup_protection.log
+  path: /datasets/attack_techniques/T1012/backup_product_key_registry/backup_protection.log
+  sourcetype: 'XmlWinEventLog'
+  source: 'XmlWinEventLog:Security'

datasets/attack_techniques/T1012/host_file_accessed/host_file_accessed.yml

@@ -0,0 +1,13 @@
+author: Teoderick Contreras, Splunk
+id: 1248c214-196d-11f1-a72e-629be353806a
+date: '2026-03-06'
+description: Generated datasets for host file accessed in attack range.
+environment: attack_range
+directory: host_file_accessed
+mitre_technique:
+- T1012
+datasets:
+- name: hosts_accessed.log
+  path: /datasets/attack_techniques/T1012/host_file_accessed/hosts_accessed.log
+  sourcetype: 'XmlWinEventLog'
+  source: 'XmlWinEventLog:Security'

datasets/attack_techniques/T1047/susp_winrar/susp_winrar.yml

@@ -0,0 +1,13 @@
+author: Teoderick Contreras, Splunk
+id: ebd77fee-196c-11f1-a72e-629be353806a
+date: '2026-03-06'
+description: Generated datasets for susp winrar in attack range.
+environment: attack_range
+directory: susp_winrar
+mitre_technique:
+- T1047
+datasets:
+- name: blank123.log
+  path: /datasets/attack_techniques/T1047/susp_winrar/blank123.log
+  sourcetype: 'XmlWinEventLog'
+  source: 'XmlWinEventLog:Microsoft-Windows-Sysmon/Operational'

datasets/attack_techniques/T1047/wmic_classes/wmic_classes.yml

@@ -0,0 +1,13 @@
+author: Teoderick Contreras, Splunk
+id: 8188a806-196d-11f1-a72e-629be353806a
+date: '2026-03-06'
+description: Generated datasets for wmic classes in attack range.
+environment: attack_range
+directory: wmic_classes
+mitre_technique:
+- T1047
+datasets:
+- name: wmic_cmd.log
+  path: /datasets/attack_techniques/T1047/wmic_classes/wmic_cmd.log
+  sourcetype: 'XmlWinEventLog'
+  source: 'XmlWinEventLog:Microsoft-Windows-Sysmon/Operational'

datasets/attack_techniques/T1071.004/upload_files_dns/upload_files_dns.yml

@@ -0,0 +1,13 @@
+author: Teoderick Contreras, Splunk
+id: f5d8301e-196d-11f1-a72e-629be353806a
+date: '2026-03-06'
+description: Generated datasets for upload files dns in attack range.
+environment: attack_range
+directory: upload_files_dns
+mitre_technique:
+- T1071.004
+datasets:
+- name: upload_files.log
+  path: /datasets/attack_techniques/T1071.004/upload_files_dns/upload_files.log
+  sourcetype: 'XmlWinEventLog'
+  source: 'XmlWinEventLog:Microsoft-Windows-Sysmon/Operational'

datasets/attack_techniques/T1562.001/mpcmdrun_remove/mpcmdrun_remove.yml

@@ -0,0 +1,13 @@
+author: Teoderick Contreras, Splunk
+id: 30280a92-196d-11f1-a72e-629be353806a
+date: '2026-03-06'
+description: Generated datasets for mpcmdrun remove in attack range.
+environment: attack_range
+directory: mpcmdrun_remove
+mitre_technique:
+- T1562.001
+datasets:
+- name: mpcmdrun_remove.log
+  path: /datasets/attack_techniques/T1562.001/mpcmdrun_remove/mpcmdrun_remove.log
+  sourcetype: 'XmlWinEventLog'
+  source: 'XmlWinEventLog:Microsoft-Windows-Sysmon/Operational'