diff --git a/datasets/attack_techniques/T1036.003/renamed_3rd_party_software/renamed_3rd_party_software.log b/datasets/attack_techniques/T1036.003/renamed_3rd_party_software/renamed_3rd_party_software.log new file mode 100644 index 000000000..d5d2936b4 --- /dev/null +++ b/datasets/attack_techniques/T1036.003/renamed_3rd_party_software/renamed_3rd_party_software.log @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:ce82892b197330266afe57e650841d9cd4fb83675943725386f114ea944d0957 +size 4094 diff --git a/datasets/attack_techniques/T1036.003/renamed_3rd_party_software/renamed_3rd_party_software.yml b/datasets/attack_techniques/T1036.003/renamed_3rd_party_software/renamed_3rd_party_software.yml new file mode 100644 index 000000000..c23dc1b5c --- /dev/null +++ b/datasets/attack_techniques/T1036.003/renamed_3rd_party_software/renamed_3rd_party_software.yml @@ -0,0 +1,13 @@ +author: Onur Mustafa Erdogan, Splunk +id: 46057aa5-4909-43f6-8628-79cf2687c4ba +date: '2025-09-23' +description: Generated datasets for renamed 3rd party software in attack range. +environment: attack_range +directory: renamed_3rd_party_software +mitre_technique: +- T1036.003 +datasets: +- name: renamed_3rd_party_software + path: /datasets/attack_techniques/T1036.003/renamed_3rd_party_software/renamed_3rd_party_software.log + sourcetype: XmlWinEventLog + source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational \ No newline at end of file diff --git a/datasets/attack_techniques/T1036.003/renamed_command_interpreter/renamed_command_interpreter.log b/datasets/attack_techniques/T1036.003/renamed_command_interpreter/renamed_command_interpreter.log new file mode 100644 index 000000000..80abdce4e --- /dev/null +++ b/datasets/attack_techniques/T1036.003/renamed_command_interpreter/renamed_command_interpreter.log @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:9e53987a2828fe0cce719abee62df2eca8da92625fc29448f7a59825f50dbda7 +size 8138 diff --git a/datasets/attack_techniques/T1036.003/renamed_command_interpreter/renamed_command_interpreter.yml b/datasets/attack_techniques/T1036.003/renamed_command_interpreter/renamed_command_interpreter.yml new file mode 100644 index 000000000..016151638 --- /dev/null +++ b/datasets/attack_techniques/T1036.003/renamed_command_interpreter/renamed_command_interpreter.yml @@ -0,0 +1,13 @@ +author: Onur Mustafa Erdogan, Splunk +id: bf88b359-6f72-4f6f-99da-14053ac7e39c +date: '2025-09-23' +description: Generated datasets for renamed command interpreter in attack range. +environment: attack_range +directory: renamed_command_interpreter +mitre_technique: +- T1036.003 +datasets: +- name: renamed_command_interpreter + path: /datasets/attack_techniques/T1036.003/renamed_command_interpreter/renamed_command_interpreter.log + sourcetype: XmlWinEventLog + source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational \ No newline at end of file diff --git a/datasets/attack_techniques/T1036.003/renamed_python_binary/renamed_python_binary.log b/datasets/attack_techniques/T1036.003/renamed_python_binary/renamed_python_binary.log new file mode 100644 index 000000000..51fa0612c --- /dev/null +++ b/datasets/attack_techniques/T1036.003/renamed_python_binary/renamed_python_binary.log @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:e0337002000da2c37fef5a69b2cf43804e327c93dc9fca3a99dcbf7e63b0e3b1 +size 4056 diff --git a/datasets/attack_techniques/T1036.003/renamed_python_binary/renamed_python_binary.yml b/datasets/attack_techniques/T1036.003/renamed_python_binary/renamed_python_binary.yml new file mode 100644 index 000000000..86bd91079 --- /dev/null +++ b/datasets/attack_techniques/T1036.003/renamed_python_binary/renamed_python_binary.yml @@ -0,0 +1,13 @@ +author: Onur Mustafa Erdogan, Splunk +id: 620c34ae-aff8-41d0-9831-9b21b4f90d34 +date: '2025-09-23' +description: Generated datasets for renamed python binary in attack range. +environment: attack_range +directory: renamed_python_binary +mitre_technique: +- T1036.003 +datasets: +- name: renamed_python_binary + path: /datasets/attack_techniques/T1036.003/renamed_python_binary/renamed_python_binary.log + sourcetype: XmlWinEventLog + source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational \ No newline at end of file