Merge pull request #1159 from splunk/vip_inj

tccontre · web-flow · commit 3edb6278a0ea · 2026-04-22T15:33:38.000+02:00
vip_inj
diff --git a/datasets/attack_techniques/T1059.001/vip_injection_pwh/pwh_net_inline.log b/datasets/attack_techniques/T1059.001/vip_injection_pwh/pwh_net_inline.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c38d09675a3a9459d85d71bebecec9461d7dfc800144e624c71cb052a9d5e067
+size 8227
diff --git a/datasets/attack_techniques/T1059.001/vip_injection_pwh/vip_injection_pwh.yml b/datasets/attack_techniques/T1059.001/vip_injection_pwh/vip_injection_pwh.yml
@@ -0,0 +1,13 @@
+author: Teoderick Contreras, Splunk
+id: df6600c0-3e4a-11f1-91b6-629be3538068
+date: '2026-04-22'
+description: Generated datasets for vip injection pwh in attack range.
+environment: attack_range
+directory: vip_injection_pwh
+mitre_technique:
+- T1059.001
+datasets:
+- name: pwh_net_inline.log
+  path: /datasets/attack_techniques/T1059.001/vip_injection_pwh/pwh_net_inline.log
+  sourcetype: 'XmlWinEventLog'
+  source: 'XmlWinEventLog:Microsoft-Windows-PowerShell/Operational'

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+version https://git-lfs.github.com/spec/v1`
	`2`	`+oid sha256:c38d09675a3a9459d85d71bebecec9461d7dfc800144e624c71cb052a9d5e067`
	`3`	`+size 8227`