name: attacker_tools
date: 2025-06-23
version: 4
id: 72620fe1-26cb-4cee-a6ee-8c6127056d81
author: Splunk Threat Research Team
lookup_type: csv
description: A list of tools used by attackers
match_type: 
- WILDCARD(attacker_tool_names)
min_matches: 1
case_sensitive_match: false