Skip to content

Commit ce2bc5d

Browse files
Axselllnasbench
andauthored
Add DirtyFrag custom auditd attack data (#1182)
--------- Co-authored-by: axsel <anasahetapi99.com> Co-authored-by: Nasreddine Bencherchali <nbencher@cisco.com>
1 parent d68aef4 commit ce2bc5d

2 files changed

Lines changed: 8 additions & 1 deletion

File tree

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
version https://git-lfs.github.com/spec/v1
2+
oid sha256:c129c3c53d765e485cb2779ca607ccdbd924555a1ebae1711d55ec6205de25b0
3+
size 126849

datasets/attack_techniques/T1068/linux_dirtyfrag/linux_dirtyfrag.yml

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,4 +19,8 @@ datasets:
1919
- name: linux_sysmon
2020
sourcetype: sysmon:linux
2121
source: Syslog:Linux-Sysmon/Operational
22-
path: /datasets/attack_techniques/T1068/linux_dirtyfrag/linux_sysmon.log
22+
path: /datasets/attack_techniques/T1068/linux_dirtyfrag/linux_sysmon.log
23+
- name: dirty_frag_events_trimmed
24+
sourcetype: auditd
25+
source: auditd
26+
path: /datasets/attack_techniques/T1068/linux_dirtyfrag/dirty_frag_events_trimmed.log

0 commit comments

Comments
 (0)