Files
splunk-security_content/lookups/attacker_tools.yml
2025-03-31 12:05:21 -06:00

11 lines
277 B
YAML

name: attacker_tools
date: 2025-03-18
version: 3
id: 72620fe1-26cb-4cee-a6ee-8c6127056d81
author: Splunk Threat Research Team
lookup_type: csv
description: A list of tools used by attackers
match_type:
- WILDCARD(attacker_tool_names)
min_matches: 1
case_sensitive_match: false