mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
DCShadow Detection
This commit is contained in:
@@ -7,7 +7,7 @@ tests:
|
||||
latest_time: now
|
||||
attack_data:
|
||||
- file_name: windows-security-xml.log
|
||||
data: - https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1207/mimikatz/windows-security-xml.log
|
||||
data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1207/mimikatz/windows-security-xml.log
|
||||
source: XmlWinEventLog:Security
|
||||
sourcetype: XmlWinEventLog
|
||||
update_timestamp: true
|
||||
|
||||
Reference in New Issue
Block a user