Skip to content

Commit 286db79

Browse files
tccontretccontre
authored
Merge pull request #1155 from splunk/vip
vip
2 parents e6509a2 + a159d2b commit 286db79

4 files changed

Lines changed: 32 additions & 0 deletions

File tree

‎datasets/attack_techniques/T1112/vip_big_env_variable/vip_INTERNAL_DB_CACHE.log‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
version https://git-lfs.github.com/spec/v1
2+
oid sha256:b7b7a92f504ec7af15951bb2de90ed91f35499909331de3f70a8bfd7ea6d12cf
3+
size 20948

‎datasets/attack_techniques/T1112/vip_big_env_variable/vip_big_env_variable.yml‎

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
author: Teoderick Contreras, Splunk
2+
id: 37c77a40-39a6-11f1-b68e-629be3538069
3+
date: '2026-04-16'
4+
description: Generated datasets for vip big env variable in attack range.
5+
environment: attack_range
6+
directory: vip_big_env_variable
7+
mitre_technique:
8+
- T1112
9+
datasets:
10+
- name: vip_INTERNAL_DB_CACHE.log
11+
path: /datasets/attack_techniques/T1112/vip_big_env_variable/vip_INTERNAL_DB_CACHE.log
12+
sourcetype: 'XmlWinEventLog'
13+
source: 'XmlWinEventLog:Microsoft-Windows-Sysmon/Operational'

‎datasets/attack_techniques/T1218/vip_aspnet_process/vip_aspnet_process.log‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
version https://git-lfs.github.com/spec/v1
2+
oid sha256:9294f3a6b31ca36ad954bd65bf2ca2bbced303f79e1e68e3dfbdb8895eb1c990
3+
size 42550

‎datasets/attack_techniques/T1218/vip_aspnet_process/vip_aspnet_process.yml‎

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
author: Teoderick Contreras, Splunk
2+
id: 71500688-39a6-11f1-b68e-629be3538069
3+
date: '2026-04-16'
4+
description: Generated datasets for vip aspnet process in attack range.
5+
environment: attack_range
6+
directory: vip_aspnet_process
7+
mitre_technique:
8+
- T1218
9+
datasets:
10+
- name: vip_aspnet_process.log
11+
path: /datasets/attack_techniques/T1218/vip_aspnet_process/vip_aspnet_process.log
12+
sourcetype: 'XmlWinEventLog'
13+
source: 'XmlWinEventLog:Microsoft-Windows-Sysmon/Operational'

0 commit comments

Comments
 (0)