name: attacker_tools
id: 72620fe1-26cb-4cee-a6ee-8c6127056d81
version: 6
creation_date: '2021-07-12'
modification_date: '2026-05-13'
author: Splunk Threat Research Team
lookup_type: csv
description: A list of tools used by attackers
match_type:
    - WILDCARD(attacker_tool_names)
min_matches: 1
case_sensitive_match: false