splunk-security_content/docs/mitre-map/detections.csv at mustang_beta

admin/splunk-security_content

Fork 0

mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00

Files

T

research bot d0aa011c20 updating docs and package bits [ci skip]

2020-11-09 23:01:54 +00:00

7.6 MiB

Raw Permalink Blame History

1	Technique ID	Detection Available	Link	score
2	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
3	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
4	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
5	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
6	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
7	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
8	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
9	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
10	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
11	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
12	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
13	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
14	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
15	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
16	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
17	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
18	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
19	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
20	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
21	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
22	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
23	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
24	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
25	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
26	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
27	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
28	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
29	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
30	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
31	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
32	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
33	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
34	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
35	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
36	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
37	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
38	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
39	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
40	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
41	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
42	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
43	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
44	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
45	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
46	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
47	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
48	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
49	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
50	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
51	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
52	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
53	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
54	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
55	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
56	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
57	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
58	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
59	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
60	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
61	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
62	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
63	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
64	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
65	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
66	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
67	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
68	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
69	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
70	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
71	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
72	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
73	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
74	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
75	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
76	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
77	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
78	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
79	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
80	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
81	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
82	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
83	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
84	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
85	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
86	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
87	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
88	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
89	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
90	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
91	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
92	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
93	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
94	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
95	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
96	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
97	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
98	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
99	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
100	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
101	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
102	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
103	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
104	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
105	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
106	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
107	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
108	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
109	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
110	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
111	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
112	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
113	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
114	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
115	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
116	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
117	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
118	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
119	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
120	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
121	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
122	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
123	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
124	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
125	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
126	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
127	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
128	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
129	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
130	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
131	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
132	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
133	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
134	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
135	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
136	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
137	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
138	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
139	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
140	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
141	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
142	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
143	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
144	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
145	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
146	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
147	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
148	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
149	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
150	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
151	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
152	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
153	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
154	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
155	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
156	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
157	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
158	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
159	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
160	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
161	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
162	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
163	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
164	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
165	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
166	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
167	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
168	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
169	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
170	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
171	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
172	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
173	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
174	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
175	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
176	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
177	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
178	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
179	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
180	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
181	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
182	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
183	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
184	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
185	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
186	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
187	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
188	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
189	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
190	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
191	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
192	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
193	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
194	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
195	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
196	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
197	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
198	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
199	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
200	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
201	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
202	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
203	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
204	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
205	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
206	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
207	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
208	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
209	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
210	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
211	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
212	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
213	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
214	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
215	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
216	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
217	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
218	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
219	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
220	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
221	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
222	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
223	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
224	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
225	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
226	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
227	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
228	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
229	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
230	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
231	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
232	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
233	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
234	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
235	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
236	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
237	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
238	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
239	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
240	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
241	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
242	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
243	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
244	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
245	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
246	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
247	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
248	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
249	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
250	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
251	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
252	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
253	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
254	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
255	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
256	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
257	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
258	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
259	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
260	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
261	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
262	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
263	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
264	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
265	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
266	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
267	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
268	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
269	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
270	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
271	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
272	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
273	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
274	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
275	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
276	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
277	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
278	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
279	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
280	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
281	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
282	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
283	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
284	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
285	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
286	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
287	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
288	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
289	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
290	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
291	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
292	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
293	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
294	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
295	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
296	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
297	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
298	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
299	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
300	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
301	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
302	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
303	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
304	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
305	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
306	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
307	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
308	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
309	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
310	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
311	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
312	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
313	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
314	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
315	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
316	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
317	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
318	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
319	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
320	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
321	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
322	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
323	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
324	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
325	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
326	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
327	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
328	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
329	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
330	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
331	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
332	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
333	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
334	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
335	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
336	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
337	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
338	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
339	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
340	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
341	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
342	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
343	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
344	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
345	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
346	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
347	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
348	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
349	T1027	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___encoded_command.yml	54
350	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
351	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
352	T1598.002	No	-	54
353	T1193	No	-	54
354	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
355	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
356	T1598.002	No	-	54
357	T1193	No	-	54
358	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
359	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
360	T1598.002	No	-	54
361	T1193	No	-	54
362	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
363	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
364	T1598.002	No	-	54
365	T1193	No	-	54
366	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
367	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
368	T1598.002	No	-	54
369	T1193	No	-	54
370	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
371	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
372	T1598.002	No	-	54
373	T1193	No	-	54
374	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
375	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
376	T1598.002	No	-	54
377	T1193	No	-	54
378	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
379	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
380	T1598.002	No	-	54
381	T1193	No	-	54
382	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
383	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
384	T1598.002	No	-	54
385	T1193	No	-	54
386	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
387	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
388	T1598.002	No	-	54
389	T1193	No	-	54
390	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
391	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
392	T1598.002	No	-	54
393	T1193	No	-	54
394	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
395	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
396	T1598.002	No	-	54
397	T1193	No	-	54
398	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
399	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
400	T1598.002	No	-	54
401	T1193	No	-	54
402	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
403	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
404	T1598.002	No	-	54
405	T1193	No	-	54
406	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
407	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
408	T1598.002	No	-	54
409	T1193	No	-	54
410	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
411	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
412	T1598.002	No	-	54
413	T1193	No	-	54
414	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
415	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
416	T1598.002	No	-	54
417	T1193	No	-	54
418	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
419	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
420	T1598.002	No	-	54
421	T1193	No	-	54
422	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
423	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
424	T1598.002	No	-	54
425	T1193	No	-	54
426	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
427	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
428	T1598.002	No	-	54
429	T1193	No	-	54
430	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
431	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
432	T1598.002	No	-	54
433	T1193	No	-	54
434	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
435	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
436	T1598.002	No	-	54
437	T1193	No	-	54
438	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
439	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
440	T1598.002	No	-	54
441	T1193	No	-	54
442	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
443	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
444	T1598.002	No	-	54
445	T1193	No	-	54
446	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
447	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
448	T1598.002	No	-	54
449	T1193	No	-	54
450	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
451	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
452	T1598.002	No	-	54
453	T1193	No	-	54
454	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
455	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
456	T1598.002	No	-	54
457	T1193	No	-	54
458	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
459	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
460	T1598.002	No	-	54
461	T1193	No	-	54
462	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
463	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
464	T1598.002	No	-	54
465	T1193	No	-	54
466	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
467	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
468	T1598.002	No	-	54
469	T1193	No	-	54
470	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
471	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
472	T1598.002	No	-	54
473	T1193	No	-	54
474	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
475	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
476	T1598.002	No	-	54
477	T1193	No	-	54
478	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
479	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
480	T1598.002	No	-	54
481	T1193	No	-	54
482	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
483	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
484	T1598.002	No	-	54
485	T1193	No	-	54
486	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
487	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
488	T1598.002	No	-	54
489	T1193	No	-	54
490	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
491	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
492	T1598.002	No	-	54
493	T1193	No	-	54
494	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
495	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
496	T1598.002	No	-	54
497	T1193	No	-	54
498	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
499	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
500	T1598.002	No	-	54
501	T1193	No	-	54
502	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
503	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
504	T1598.002	No	-	54
505	T1193	No	-	54
506	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
507	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
508	T1598.002	No	-	54
509	T1193	No	-	54
510	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
511	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
512	T1598.002	No	-	54
513	T1193	No	-	54
514	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
515	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
516	T1598.002	No	-	54
517	T1193	No	-	54
518	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
519	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
520	T1598.002	No	-	54
521	T1193	No	-	54
522	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
523	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
524	T1598.002	No	-	54
525	T1193	No	-	54
526	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
527	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
528	T1598.002	No	-	54
529	T1193	No	-	54
530	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
531	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
532	T1598.002	No	-	54
533	T1193	No	-	54
534	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
535	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
536	T1598.002	No	-	54
537	T1193	No	-	54
538	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
539	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
540	T1598.002	No	-	54
541	T1193	No	-	54
542	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
543	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
544	T1598.002	No	-	54
545	T1193	No	-	54
546	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
547	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
548	T1598.002	No	-	54
549	T1193	No	-	54
550	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
551	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
552	T1598.002	No	-	54
553	T1193	No	-	54
554	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
555	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
556	T1598.002	No	-	54
557	T1193	No	-	54
558	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
559	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
560	T1598.002	No	-	54
561	T1193	No	-	54
562	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
563	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
564	T1598.002	No	-	54
565	T1193	No	-	54
566	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
567	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
568	T1598.002	No	-	54
569	T1193	No	-	54
570	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
571	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
572	T1598.002	No	-	54
573	T1193	No	-	54
574	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
575	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
576	T1598.002	No	-	54
577	T1193	No	-	54
578	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
579	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
580	T1598.002	No	-	54
581	T1193	No	-	54
582	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
583	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
584	T1598.002	No	-	54
585	T1193	No	-	54
586	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
587	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
588	T1598.002	No	-	54
589	T1193	No	-	54
590	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
591	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
592	T1598.002	No	-	54
593	T1193	No	-	54
594	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
595	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
596	T1598.002	No	-	54
597	T1193	No	-	54
598	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
599	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
600	T1598.002	No	-	54
601	T1193	No	-	54
602	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
603	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
604	T1598.002	No	-	54
605	T1193	No	-	54
606	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
607	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
608	T1598.002	No	-	54
609	T1193	No	-	54
610	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
611	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
612	T1598.002	No	-	54
613	T1193	No	-	54
614	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
615	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
616	T1598.002	No	-	54
617	T1193	No	-	54
618	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
619	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
620	T1598.002	No	-	54
621	T1193	No	-	54
622	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
623	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
624	T1598.002	No	-	54
625	T1193	No	-	54
626	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
627	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
628	T1598.002	No	-	54
629	T1193	No	-	54
630	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
631	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
632	T1598.002	No	-	54
633	T1193	No	-	54
634	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
635	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
636	T1598.002	No	-	54
637	T1193	No	-	54
638	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
639	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
640	T1598.002	No	-	54
641	T1193	No	-	54
642	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
643	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
644	T1598.002	No	-	54
645	T1193	No	-	54
646	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
647	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
648	T1598.002	No	-	54
649	T1193	No	-	54
650	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
651	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
652	T1598.002	No	-	54
653	T1193	No	-	54
654	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
655	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
656	T1598.002	No	-	54
657	T1193	No	-	54
658	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
659	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
660	T1598.002	No	-	54
661	T1193	No	-	54
662	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
663	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
664	T1598.002	No	-	54
665	T1193	No	-	54
666	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
667	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
668	T1598.002	No	-	54
669	T1193	No	-	54
670	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
671	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
672	T1598.002	No	-	54
673	T1193	No	-	54
674	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
675	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
676	T1598.002	No	-	54
677	T1193	No	-	54
678	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
679	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
680	T1598.002	No	-	54
681	T1193	No	-	54
682	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
683	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
684	T1598.002	No	-	54
685	T1193	No	-	54
686	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
687	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
688	T1598.002	No	-	54
689	T1193	No	-	54
690	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
691	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
692	T1598.002	No	-	54
693	T1193	No	-	54
694	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
695	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
696	T1598.002	No	-	54
697	T1193	No	-	54
698	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
699	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
700	T1598.002	No	-	54
701	T1193	No	-	54
702	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
703	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
704	T1598.002	No	-	54
705	T1193	No	-	54
706	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
707	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
708	T1598.002	No	-	54
709	T1193	No	-	54
710	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
711	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
712	T1598.002	No	-	54
713	T1193	No	-	54
714	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
715	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
716	T1598.002	No	-	54
717	T1193	No	-	54
718	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
719	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
720	T1598.002	No	-	54
721	T1193	No	-	54
722	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
723	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
724	T1598.002	No	-	54
725	T1193	No	-	54
726	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
727	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
728	T1598.002	No	-	54
729	T1193	No	-	54
730	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
731	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
732	T1598.002	No	-	54
733	T1193	No	-	54
734	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
735	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
736	T1598.002	No	-	54
737	T1193	No	-	54
738	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
739	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
740	T1598.002	No	-	54
741	T1193	No	-	54
742	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
743	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
744	T1598.002	No	-	54
745	T1193	No	-	54
746	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
747	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
748	T1598.002	No	-	54
749	T1193	No	-	54
750	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
751	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
752	T1598.002	No	-	54
753	T1193	No	-	54
754	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
755	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
756	T1598.002	No	-	54
757	T1193	No	-	54
758	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
759	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
760	T1598.002	No	-	54
761	T1193	No	-	54
762	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
763	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
764	T1598.002	No	-	54
765	T1193	No	-	54
766	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
767	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
768	T1598.002	No	-	54
769	T1193	No	-	54
770	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
771	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
772	T1598.002	No	-	54
773	T1193	No	-	54
774	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
775	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
776	T1598.002	No	-	54
777	T1193	No	-	54
778	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
779	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
780	T1598.002	No	-	54
781	T1193	No	-	54
782	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
783	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
784	T1598.002	No	-	54
785	T1193	No	-	54
786	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
787	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
788	T1598.002	No	-	54
789	T1193	No	-	54
790	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
791	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
792	T1598.002	No	-	54
793	T1193	No	-	54
794	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
795	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
796	T1598.002	No	-	54
797	T1193	No	-	54
798	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
799	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
800	T1598.002	No	-	54
801	T1193	No	-	54
802	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
803	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
804	T1598.002	No	-	54
805	T1193	No	-	54
806	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
807	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
808	T1598.002	No	-	54
809	T1193	No	-	54
810	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
811	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
812	T1598.002	No	-	54
813	T1193	No	-	54
814	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
815	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
816	T1598.002	No	-	54
817	T1193	No	-	54
818	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
819	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
820	T1598.002	No	-	54
821	T1193	No	-	54
822	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
823	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
824	T1598.002	No	-	54
825	T1193	No	-	54
826	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
827	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
828	T1598.002	No	-	54
829	T1193	No	-	54
830	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
831	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
832	T1598.002	No	-	54
833	T1193	No	-	54
834	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
835	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
836	T1598.002	No	-	54
837	T1193	No	-	54
838	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
839	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
840	T1598.002	No	-	54
841	T1193	No	-	54
842	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
843	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
844	T1598.002	No	-	54
845	T1193	No	-	54
846	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
847	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
848	T1598.002	No	-	54
849	T1193	No	-	54
850	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
851	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
852	T1598.002	No	-	54
853	T1193	No	-	54
854	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
855	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
856	T1598.002	No	-	54
857	T1193	No	-	54
858	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
859	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
860	T1598.002	No	-	54
861	T1193	No	-	54
862	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
863	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
864	T1598.002	No	-	54
865	T1193	No	-	54
866	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
867	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
868	T1598.002	No	-	54
869	T1193	No	-	54
870	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
871	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
872	T1598.002	No	-	54
873	T1193	No	-	54
874	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
875	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
876	T1598.002	No	-	54
877	T1193	No	-	54
878	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
879	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
880	T1598.002	No	-	54
881	T1193	No	-	54
882	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
883	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
884	T1598.002	No	-	54
885	T1193	No	-	54
886	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
887	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
888	T1598.002	No	-	54
889	T1193	No	-	54
890	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
891	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
892	T1598.002	No	-	54
893	T1193	No	-	54
894	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
895	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
896	T1598.002	No	-	54
897	T1193	No	-	54
898	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
899	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
900	T1598.002	No	-	54
901	T1193	No	-	54
902	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
903	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
904	T1598.002	No	-	54
905	T1193	No	-	54
906	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
907	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
908	T1598.002	No	-	54
909	T1193	No	-	54
910	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
911	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
912	T1598.002	No	-	54
913	T1193	No	-	54
914	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
915	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
916	T1598.002	No	-	54
917	T1193	No	-	54
918	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
919	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
920	T1598.002	No	-	54
921	T1193	No	-	54
922	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
923	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
924	T1598.002	No	-	54
925	T1193	No	-	54
926	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
927	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
928	T1598.002	No	-	54
929	T1193	No	-	54
930	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
931	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
932	T1598.002	No	-	54
933	T1193	No	-	54
934	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
935	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
936	T1598.002	No	-	54
937	T1193	No	-	54
938	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
939	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
940	T1598.002	No	-	54
941	T1193	No	-	54
942	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
943	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
944	T1598.002	No	-	54
945	T1193	No	-	54
946	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
947	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
948	T1598.002	No	-	54
949	T1193	No	-	54
950	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
951	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
952	T1598.002	No	-	54
953	T1193	No	-	54
954	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
955	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
956	T1598.002	No	-	54
957	T1193	No	-	54
958	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
959	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
960	T1598.002	No	-	54
961	T1193	No	-	54
962	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
963	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
964	T1598.002	No	-	54
965	T1193	No	-	54
966	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
967	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
968	T1598.002	No	-	54
969	T1193	No	-	54
970	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
971	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
972	T1598.002	No	-	54
973	T1193	No	-	54
974	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
975	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
976	T1598.002	No	-	54
977	T1193	No	-	54
978	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
979	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
980	T1598.002	No	-	54
981	T1193	No	-	54
982	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
983	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
984	T1598.002	No	-	54
985	T1193	No	-	54
986	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
987	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
988	T1598.002	No	-	54
989	T1193	No	-	54
990	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
991	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
992	T1598.002	No	-	54
993	T1193	No	-	54
994	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
995	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
996	T1598.002	No	-	54
997	T1193	No	-	54
998	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
999	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1000	T1598.002	No	-	54
1001	T1193	No	-	54
1002	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1003	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1004	T1598.002	No	-	54
1005	T1193	No	-	54
1006	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1007	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1008	T1598.002	No	-	54
1009	T1193	No	-	54
1010	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1011	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1012	T1598.002	No	-	54
1013	T1193	No	-	54
1014	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1015	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1016	T1598.002	No	-	54
1017	T1193	No	-	54
1018	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1019	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1020	T1598.002	No	-	54
1021	T1193	No	-	54
1022	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1023	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1024	T1598.002	No	-	54
1025	T1193	No	-	54
1026	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1027	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1028	T1598.002	No	-	54
1029	T1193	No	-	54
1030	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1031	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1032	T1598.002	No	-	54
1033	T1193	No	-	54
1034	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1035	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1036	T1598.002	No	-	54
1037	T1193	No	-	54
1038	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1039	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1040	T1598.002	No	-	54
1041	T1193	No	-	54
1042	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1043	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1044	T1598.002	No	-	54
1045	T1193	No	-	54
1046	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1047	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1048	T1598.002	No	-	54
1049	T1193	No	-	54
1050	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1051	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1052	T1598.002	No	-	54
1053	T1193	No	-	54
1054	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1055	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1056	T1598.002	No	-	54
1057	T1193	No	-	54
1058	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1059	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1060	T1598.002	No	-	54
1061	T1193	No	-	54
1062	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1063	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1064	T1598.002	No	-	54
1065	T1193	No	-	54
1066	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1067	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1068	T1598.002	No	-	54
1069	T1193	No	-	54
1070	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1071	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1072	T1598.002	No	-	54
1073	T1193	No	-	54
1074	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1075	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1076	T1598.002	No	-	54
1077	T1193	No	-	54
1078	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1079	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1080	T1598.002	No	-	54
1081	T1193	No	-	54
1082	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1083	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1084	T1598.002	No	-	54
1085	T1193	No	-	54
1086	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1087	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1088	T1598.002	No	-	54
1089	T1193	No	-	54
1090	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1091	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1092	T1598.002	No	-	54
1093	T1193	No	-	54
1094	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1095	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1096	T1598.002	No	-	54
1097	T1193	No	-	54
1098	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1099	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1100	T1598.002	No	-	54
1101	T1193	No	-	54
1102	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1103	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1104	T1598.002	No	-	54
1105	T1193	No	-	54
1106	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1107	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1108	T1598.002	No	-	54
1109	T1193	No	-	54
1110	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1111	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1112	T1598.002	No	-	54
1113	T1193	No	-	54
1114	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1115	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1116	T1598.002	No	-	54
1117	T1193	No	-	54
1118	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1119	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1120	T1598.002	No	-	54
1121	T1193	No	-	54
1122	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1123	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1124	T1598.002	No	-	54
1125	T1193	No	-	54
1126	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1127	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1128	T1598.002	No	-	54
1129	T1193	No	-	54
1130	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1131	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1132	T1598.002	No	-	54
1133	T1193	No	-	54
1134	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1135	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1136	T1598.002	No	-	54
1137	T1193	No	-	54
1138	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1139	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1140	T1598.002	No	-	54
1141	T1193	No	-	54
1142	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1143	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1144	T1598.002	No	-	54
1145	T1193	No	-	54
1146	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1147	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1148	T1598.002	No	-	54
1149	T1193	No	-	54
1150	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1151	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1152	T1598.002	No	-	54
1153	T1193	No	-	54
1154	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1155	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1156	T1598.002	No	-	54
1157	T1193	No	-	54
1158	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1159	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1160	T1598.002	No	-	54
1161	T1193	No	-	54
1162	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1163	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1164	T1598.002	No	-	54
1165	T1193	No	-	54
1166	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1167	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1168	T1598.002	No	-	54
1169	T1193	No	-	54
1170	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1171	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1172	T1598.002	No	-	54
1173	T1193	No	-	54
1174	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1175	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1176	T1598.002	No	-	54
1177	T1193	No	-	54
1178	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1179	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1180	T1598.002	No	-	54
1181	T1193	No	-	54
1182	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1183	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1184	T1598.002	No	-	54
1185	T1193	No	-	54
1186	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1187	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1188	T1598.002	No	-	54
1189	T1193	No	-	54
1190	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1191	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1192	T1598.002	No	-	54
1193	T1193	No	-	54
1194	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1195	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1196	T1598.002	No	-	54
1197	T1193	No	-	54
1198	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1199	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1200	T1598.002	No	-	54
1201	T1193	No	-	54
1202	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1203	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1204	T1598.002	No	-	54
1205	T1193	No	-	54
1206	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1207	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1208	T1598.002	No	-	54
1209	T1193	No	-	54
1210	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1211	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1212	T1598.002	No	-	54
1213	T1193	No	-	54
1214	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1215	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1216	T1598.002	No	-	54
1217	T1193	No	-	54
1218	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1219	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1220	T1598.002	No	-	54
1221	T1193	No	-	54
1222	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1223	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1224	T1598.002	No	-	54
1225	T1193	No	-	54
1226	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1227	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1228	T1598.002	No	-	54
1229	T1193	No	-	54
1230	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1231	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1232	T1598.002	No	-	54
1233	T1193	No	-	54
1234	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1235	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1236	T1598.002	No	-	54
1237	T1193	No	-	54
1238	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1239	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1240	T1598.002	No	-	54
1241	T1193	No	-	54
1242	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1243	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1244	T1598.002	No	-	54
1245	T1193	No	-	54
1246	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1247	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1248	T1598.002	No	-	54
1249	T1193	No	-	54
1250	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1251	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1252	T1598.002	No	-	54
1253	T1193	No	-	54
1254	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1255	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1256	T1598.002	No	-	54
1257	T1193	No	-	54
1258	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1259	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1260	T1598.002	No	-	54
1261	T1193	No	-	54
1262	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1263	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1264	T1598.002	No	-	54
1265	T1193	No	-	54
1266	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1267	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1268	T1598.002	No	-	54
1269	T1193	No	-	54
1270	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1271	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1272	T1598.002	No	-	54
1273	T1193	No	-	54
1274	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1275	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1276	T1598.002	No	-	54
1277	T1193	No	-	54
1278	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1279	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1280	T1598.002	No	-	54
1281	T1193	No	-	54
1282	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1283	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1284	T1598.002	No	-	54
1285	T1193	No	-	54
1286	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1287	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1288	T1598.002	No	-	54
1289	T1193	No	-	54
1290	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1291	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1292	T1598.002	No	-	54
1293	T1193	No	-	54
1294	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1295	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1296	T1598.002	No	-	54
1297	T1193	No	-	54
1298	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1299	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1300	T1598.002	No	-	54
1301	T1193	No	-	54
1302	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1303	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1304	T1598.002	No	-	54
1305	T1193	No	-	54
1306	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1307	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1308	T1598.002	No	-	54
1309	T1193	No	-	54
1310	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1311	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1312	T1598.002	No	-	54
1313	T1193	No	-	54
1314	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1315	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1316	T1598.002	No	-	54
1317	T1193	No	-	54
1318	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1319	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1320	T1598.002	No	-	54
1321	T1193	No	-	54
1322	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1323	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1324	T1598.002	No	-	54
1325	T1193	No	-	54
1326	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1327	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1328	T1598.002	No	-	54
1329	T1193	No	-	54
1330	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1331	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1332	T1598.002	No	-	54
1333	T1193	No	-	54
1334	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1335	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1336	T1598.002	No	-	54
1337	T1193	No	-	54
1338	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1339	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1340	T1598.002	No	-	54
1341	T1193	No	-	54
1342	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1343	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1344	T1598.002	No	-	54
1345	T1193	No	-	54
1346	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1347	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1348	T1598.002	No	-	54
1349	T1193	No	-	54
1350	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1351	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1352	T1598.002	No	-	54
1353	T1193	No	-	54
1354	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1355	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1356	T1598.002	No	-	54
1357	T1193	No	-	54
1358	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1359	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1360	T1598.002	No	-	54
1361	T1193	No	-	54
1362	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1363	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1364	T1598.002	No	-	54
1365	T1193	No	-	54
1366	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1367	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1368	T1598.002	No	-	54
1369	T1193	No	-	54
1370	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1371	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1372	T1598.002	No	-	54
1373	T1193	No	-	54
1374	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1375	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1376	T1598.002	No	-	54
1377	T1193	No	-	54
1378	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1379	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1380	T1598.002	No	-	54
1381	T1193	No	-	54
1382	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1383	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1384	T1598.002	No	-	54
1385	T1193	No	-	54
1386	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1387	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1388	T1598.002	No	-	54
1389	T1193	No	-	54
1390	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1391	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1392	T1598.002	No	-	54
1393	T1193	No	-	54
1394	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1395	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1396	T1598.002	No	-	54
1397	T1193	No	-	54
1398	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1399	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1400	T1598.002	No	-	54
1401	T1193	No	-	54
1402	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1403	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1404	T1598.002	No	-	54
1405	T1193	No	-	54
1406	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1407	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1408	T1598.002	No	-	54
1409	T1193	No	-	54
1410	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1411	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1412	T1598.002	No	-	54
1413	T1193	No	-	54
1414	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1415	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1416	T1598.002	No	-	54
1417	T1193	No	-	54
1418	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1419	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1420	T1598.002	No	-	54
1421	T1193	No	-	54
1422	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1423	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1424	T1598.002	No	-	54
1425	T1193	No	-	54
1426	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1427	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1428	T1598.002	No	-	54
1429	T1193	No	-	54
1430	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1431	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1432	T1598.002	No	-	54
1433	T1193	No	-	54
1434	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1435	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1436	T1598.002	No	-	54
1437	T1193	No	-	54
1438	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1439	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1440	T1598.002	No	-	54
1441	T1193	No	-	54
1442	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1443	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1444	T1598.002	No	-	54
1445	T1193	No	-	54
1446	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1447	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1448	T1598.002	No	-	54
1449	T1193	No	-	54
1450	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1451	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1452	T1598.002	No	-	54
1453	T1193	No	-	54
1454	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1455	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1456	T1598.002	No	-	54
1457	T1193	No	-	54
1458	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1459	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1460	T1598.002	No	-	54
1461	T1193	No	-	54
1462	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1463	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1464	T1598.002	No	-	54
1465	T1193	No	-	54
1466	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1467	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1468	T1598.002	No	-	54
1469	T1193	No	-	54
1470	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1471	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1472	T1598.002	No	-	54
1473	T1193	No	-	54
1474	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1475	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1476	T1598.002	No	-	54
1477	T1193	No	-	54
1478	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1479	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1480	T1598.002	No	-	54
1481	T1193	No	-	54
1482	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1483	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1484	T1598.002	No	-	54
1485	T1193	No	-	54
1486	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1487	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1488	T1598.002	No	-	54
1489	T1193	No	-	54
1490	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1491	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1492	T1598.002	No	-	54
1493	T1193	No	-	54
1494	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1495	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1496	T1598.002	No	-	54
1497	T1193	No	-	54
1498	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1499	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1500	T1598.002	No	-	54
1501	T1193	No	-	54
1502	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1503	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1504	T1598.002	No	-	54
1505	T1193	No	-	54
1506	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1507	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1508	T1598.002	No	-	54
1509	T1193	No	-	54
1510	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1511	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1512	T1598.002	No	-	54
1513	T1193	No	-	54
1514	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1515	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1516	T1598.002	No	-	54
1517	T1193	No	-	54
1518	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1519	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1520	T1598.002	No	-	54
1521	T1193	No	-	54
1522	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1523	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1524	T1598.002	No	-	54
1525	T1193	No	-	54
1526	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1527	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1528	T1598.002	No	-	54
1529	T1193	No	-	54
1530	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1531	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1532	T1598.002	No	-	54
1533	T1193	No	-	54
1534	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1535	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1536	T1598.002	No	-	54
1537	T1193	No	-	54
1538	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1539	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1540	T1598.002	No	-	54
1541	T1193	No	-	54
1542	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1543	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1544	T1598.002	No	-	54
1545	T1193	No	-	54
1546	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1547	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1548	T1598.002	No	-	54
1549	T1193	No	-	54
1550	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1551	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1552	T1598.002	No	-	54
1553	T1193	No	-	54
1554	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1555	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1556	T1598.002	No	-	54
1557	T1193	No	-	54
1558	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1559	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1560	T1598.002	No	-	54
1561	T1193	No	-	54
1562	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1563	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1564	T1598.002	No	-	54
1565	T1193	No	-	54
1566	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1567	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1568	T1598.002	No	-	54
1569	T1193	No	-	54
1570	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1571	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1572	T1598.002	No	-	54
1573	T1193	No	-	54
1574	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1575	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1576	T1598.002	No	-	54
1577	T1193	No	-	54
1578	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1579	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1580	T1598.002	No	-	54
1581	T1193	No	-	54
1582	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1583	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1584	T1598.002	No	-	54
1585	T1193	No	-	54
1586	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1587	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1588	T1598.002	No	-	54
1589	T1193	No	-	54
1590	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1591	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1592	T1598.002	No	-	54
1593	T1193	No	-	54
1594	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1595	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1596	T1598.002	No	-	54
1597	T1193	No	-	54
1598	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1599	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1600	T1598.002	No	-	54
1601	T1193	No	-	54
1602	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1603	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1604	T1598.002	No	-	54
1605	T1193	No	-	54
1606	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1607	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1608	T1598.002	No	-	54
1609	T1193	No	-	54
1610	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1611	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1612	T1598.002	No	-	54
1613	T1193	No	-	54
1614	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1615	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1616	T1598.002	No	-	54
1617	T1193	No	-	54
1618	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1619	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1620	T1598.002	No	-	54
1621	T1193	No	-	54
1622	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1623	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1624	T1598.002	No	-	54
1625	T1193	No	-	54
1626	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1627	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1628	T1598.002	No	-	54
1629	T1193	No	-	54
1630	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1631	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1632	T1598.002	No	-	54
1633	T1193	No	-	54
1634	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1635	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1636	T1598.002	No	-	54
1637	T1193	No	-	54
1638	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1639	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1640	T1598.002	No	-	54
1641	T1193	No	-	54
1642	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1643	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1644	T1598.002	No	-	54
1645	T1193	No	-	54
1646	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1647	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1648	T1598.002	No	-	54
1649	T1193	No	-	54
1650	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1651	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1652	T1598.002	No	-	54
1653	T1193	No	-	54
1654	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1655	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1656	T1598.002	No	-	54
1657	T1193	No	-	54
1658	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1659	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1660	T1598.002	No	-	54
1661	T1193	No	-	54
1662	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1663	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1664	T1598.002	No	-	54
1665	T1193	No	-	54
1666	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1667	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1668	T1598.002	No	-	54
1669	T1193	No	-	54
1670	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1671	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1672	T1598.002	No	-	54
1673	T1193	No	-	54
1674	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1675	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1676	T1598.002	No	-	54
1677	T1193	No	-	54
1678	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1679	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1680	T1598.002	No	-	54
1681	T1193	No	-	54
1682	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1683	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1684	T1598.002	No	-	54
1685	T1193	No	-	54
1686	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1687	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1688	T1598.002	No	-	54
1689	T1193	No	-	54
1690	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1691	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1692	T1598.002	No	-	54
1693	T1193	No	-	54
1694	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1695	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1696	T1598.002	No	-	54
1697	T1193	No	-	54
1698	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1699	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1700	T1598.002	No	-	54
1701	T1193	No	-	54
1702	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1703	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1704	T1598.002	No	-	54
1705	T1193	No	-	54
1706	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1707	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1708	T1598.002	No	-	54
1709	T1193	No	-	54
1710	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1711	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1712	T1598.002	No	-	54
1713	T1193	No	-	54
1714	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1715	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1716	T1598.002	No	-	54
1717	T1193	No	-	54
1718	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1719	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1720	T1598.002	No	-	54
1721	T1193	No	-	54
1722	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1723	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1724	T1598.002	No	-	54
1725	T1193	No	-	54
1726	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1727	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1728	T1598.002	No	-	54
1729	T1193	No	-	54
1730	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1731	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1732	T1598.002	No	-	54
1733	T1193	No	-	54
1734	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1735	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1736	T1598.002	No	-	54
1737	T1193	No	-	54
1738	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/suspicious_email_attachment_extensions.yml	52
1739	T1566.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_oulook_exe_writing_a__zip_file.yml	52
1740	T1598.002	No	-	54
1741	T1193	No	-	54
1742	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1743	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1744	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1745	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1746	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1747	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1748	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1749	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1750	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1751	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1752	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1753	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1754	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1755	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1756	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1757	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1758	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1759	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1760	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1761	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1762	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1763	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1764	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1765	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1766	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1767	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1768	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1769	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1770	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1771	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1772	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1773	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1774	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1775	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1776	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1777	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1778	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1779	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1780	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1781	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1782	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1783	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1784	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1785	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1786	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1787	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1788	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1789	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1790	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1791	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1792	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1793	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1794	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1795	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1796	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1797	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1798	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1799	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1800	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1801	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1802	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1803	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1804	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1805	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1806	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1807	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1808	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1809	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1810	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1811	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1812	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1813	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1814	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1815	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1816	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1817	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1818	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1819	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1820	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1821	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1822	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1823	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1824	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1825	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1826	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1827	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1828	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1829	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1830	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1831	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1832	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1833	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1834	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1835	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1836	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1837	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1838	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1839	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1840	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1841	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1842	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1843	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1844	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1845	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1846	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1847	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1848	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1849	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1850	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1851	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1852	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1853	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1854	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1855	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1856	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1857	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1858	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1859	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1860	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1861	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1862	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1863	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1864	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1865	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1866	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1867	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1868	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1869	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1870	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1871	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1872	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1873	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1874	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1875	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1876	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1877	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1878	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1879	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1880	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1881	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1882	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1883	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1884	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1885	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1886	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1887	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1888	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1889	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1890	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1891	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1892	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1893	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1894	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1895	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1896	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1897	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1898	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1899	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1900	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1901	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1902	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1903	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1904	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1905	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1906	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1907	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1908	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1909	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1910	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1911	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1912	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1913	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1914	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1915	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1916	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1917	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1918	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1919	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1920	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1921	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1922	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1923	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1924	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1925	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1926	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1927	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1928	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1929	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1930	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1931	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1932	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1933	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1934	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1935	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1936	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1937	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1938	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1939	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1940	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1941	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1942	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1943	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1944	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1945	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1946	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1947	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1948	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1949	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1950	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1951	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1952	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1953	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1954	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1955	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1956	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1957	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1958	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1959	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1960	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1961	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1962	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1963	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1964	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1965	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1966	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1967	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1968	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1969	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1970	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1971	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1972	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1973	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1974	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1975	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1976	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1977	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1978	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1979	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1980	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1981	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1982	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1983	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1984	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1985	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1986	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1987	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1988	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1989	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1990	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1991	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1992	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1993	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1994	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1995	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1996	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1997	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
1998	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
1999	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2000	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2001	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2002	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2003	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2004	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2005	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2006	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2007	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2008	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2009	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2010	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2011	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2012	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2013	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2014	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2015	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2016	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2017	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2018	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2019	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2020	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2021	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2022	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2023	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2024	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2025	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2026	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2027	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2028	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2029	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2030	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2031	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2032	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2033	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2034	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2035	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2036	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2037	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2038	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2039	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2040	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2041	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2042	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2043	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2044	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2045	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2046	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2047	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2048	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2049	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2050	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2051	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2052	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2053	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2054	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2055	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2056	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2057	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2058	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2059	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2060	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2061	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2062	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2063	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2064	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2065	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2066	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2067	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2068	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2069	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2070	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2071	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2072	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2073	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2074	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2075	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2076	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2077	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2078	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2079	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2080	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2081	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2082	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2083	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2084	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2085	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2086	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2087	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2088	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2089	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2090	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2091	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2092	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2093	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2094	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2095	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2096	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2097	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2098	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2099	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2100	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2101	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2102	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2103	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2104	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2105	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2106	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2107	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2108	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2109	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2110	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2111	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2112	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2113	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2114	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2115	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2116	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2117	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2118	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2119	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2120	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2121	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2122	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2123	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2124	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2125	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2126	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2127	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2128	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2129	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2130	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2131	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2132	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2133	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2134	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2135	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2136	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2137	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2138	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2139	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2140	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2141	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2142	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2143	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2144	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2145	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2146	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2147	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2148	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2149	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2150	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2151	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2152	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2153	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2154	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2155	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2156	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2157	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2158	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2159	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2160	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2161	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2162	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2163	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2164	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2165	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2166	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2167	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2168	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2169	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2170	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2171	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2172	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2173	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2174	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2175	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2176	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2177	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2178	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2179	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2180	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2181	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2182	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2183	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2184	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2185	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2186	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2187	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2188	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2189	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2190	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2191	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2192	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2193	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2194	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2195	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2196	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2197	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2198	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2199	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2200	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2201	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2202	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2203	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2204	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2205	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2206	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2207	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2208	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2209	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2210	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2211	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2212	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2213	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2214	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2215	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2216	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2217	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2218	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2219	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2220	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2221	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2222	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2223	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2224	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2225	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2226	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2227	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2228	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2229	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2230	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2231	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2232	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2233	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2234	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2235	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2236	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2237	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2238	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2239	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2240	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2241	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2242	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2243	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2244	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2245	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2246	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2247	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2248	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2249	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2250	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2251	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2252	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2253	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2254	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2255	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2256	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2257	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2258	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2259	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2260	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2261	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2262	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2263	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2264	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2265	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2266	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2267	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2268	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2269	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2270	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2271	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2272	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2273	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2274	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2275	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2276	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2277	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2278	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2279	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2280	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2281	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2282	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2283	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2284	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2285	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2286	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2287	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2288	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2289	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2290	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2291	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2292	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2293	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2294	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2295	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2296	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2297	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2298	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2299	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2300	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2301	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2302	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2303	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2304	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2305	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2306	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2307	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2308	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2309	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2310	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2311	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2312	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2313	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2314	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2315	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2316	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2317	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2318	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2319	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2320	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2321	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2322	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2323	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2324	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2325	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2326	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2327	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2328	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2329	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2330	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2331	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2332	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2333	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2334	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2335	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2336	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2337	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2338	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2339	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2340	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2341	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2342	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2343	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2344	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2345	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2346	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2347	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2348	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2349	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2350	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2351	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2352	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2353	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2354	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2355	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2356	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2357	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2358	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2359	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2360	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2361	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2362	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2363	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2364	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2365	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2366	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2367	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2368	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2369	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2370	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2371	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2372	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2373	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2374	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2375	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2376	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2377	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2378	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2379	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2380	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2381	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2382	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2383	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2384	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2385	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2386	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2387	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2388	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2389	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2390	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2391	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2392	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2393	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2394	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2395	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2396	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2397	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2398	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2399	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2400	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2401	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2402	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2403	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2404	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2405	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2406	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2407	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2408	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2409	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2410	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2411	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2412	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2413	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2414	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2415	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2416	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2417	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2418	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2419	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2420	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2421	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2422	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2423	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2424	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2425	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2426	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2427	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2428	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2429	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2430	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2431	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2432	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2433	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2434	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2435	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2436	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/batch_file_write_to_system32.yml	51
2437	T1204.002	Yes	https://github.com/splunk/security-content/blob/develop/detections/uncommon_processes_on_endpoint.yml	51
2438	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/first_time_seen_command_line_argument.yml	38
2439	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process_with_obfuscation_techniques.yml	38
2440	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/attempt_to_set_default_powershell_execution_policy_to_unrestricted_or_bypass.yml	38
2441	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/processes_created_by_netsh.yml	38
2442	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___connect_to_internet_with_hidden_window.yml	38
2443	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_psexec_with_accepteula_flag.yml	38
2444	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___execution_policy_bypass.yml	38
2445	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___multiple_suspicious_command_line_arguments.yml	38
2446	T1086	No	-	46
2447	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/first_time_seen_command_line_argument.yml	38
2448	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process_with_obfuscation_techniques.yml	38
2449	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/attempt_to_set_default_powershell_execution_policy_to_unrestricted_or_bypass.yml	38
2450	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/processes_created_by_netsh.yml	38
2451	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___connect_to_internet_with_hidden_window.yml	38
2452	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_psexec_with_accepteula_flag.yml	38
2453	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___execution_policy_bypass.yml	38
2454	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___multiple_suspicious_command_line_arguments.yml	38
2455	T1086	No	-	46
2456	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/first_time_seen_command_line_argument.yml	38
2457	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process_with_obfuscation_techniques.yml	38
2458	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/attempt_to_set_default_powershell_execution_policy_to_unrestricted_or_bypass.yml	38
2459	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/processes_created_by_netsh.yml	38
2460	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___connect_to_internet_with_hidden_window.yml	38
2461	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_psexec_with_accepteula_flag.yml	38
2462	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___execution_policy_bypass.yml	38
2463	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___multiple_suspicious_command_line_arguments.yml	38
2464	T1086	No	-	46
2465	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/first_time_seen_command_line_argument.yml	38
2466	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process_with_obfuscation_techniques.yml	38
2467	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/attempt_to_set_default_powershell_execution_policy_to_unrestricted_or_bypass.yml	38
2468	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/processes_created_by_netsh.yml	38
2469	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___connect_to_internet_with_hidden_window.yml	38
2470	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_psexec_with_accepteula_flag.yml	38
2471	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___execution_policy_bypass.yml	38
2472	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___multiple_suspicious_command_line_arguments.yml	38
2473	T1086	No	-	46
2474	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/first_time_seen_command_line_argument.yml	38
2475	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process_with_obfuscation_techniques.yml	38
2476	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/attempt_to_set_default_powershell_execution_policy_to_unrestricted_or_bypass.yml	38
2477	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/processes_created_by_netsh.yml	38
2478	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___connect_to_internet_with_hidden_window.yml	38
2479	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_psexec_with_accepteula_flag.yml	38
2480	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___execution_policy_bypass.yml	38
2481	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___multiple_suspicious_command_line_arguments.yml	38
2482	T1086	No	-	46
2483	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/first_time_seen_command_line_argument.yml	38
2484	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process_with_obfuscation_techniques.yml	38
2485	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/attempt_to_set_default_powershell_execution_policy_to_unrestricted_or_bypass.yml	38
2486	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/processes_created_by_netsh.yml	38
2487	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___connect_to_internet_with_hidden_window.yml	38
2488	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_psexec_with_accepteula_flag.yml	38
2489	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___execution_policy_bypass.yml	38
2490	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___multiple_suspicious_command_line_arguments.yml	38
2491	T1086	No	-	46
2492	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/first_time_seen_command_line_argument.yml	38
2493	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process_with_obfuscation_techniques.yml	38
2494	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/attempt_to_set_default_powershell_execution_policy_to_unrestricted_or_bypass.yml	38
2495	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/processes_created_by_netsh.yml	38
2496	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___connect_to_internet_with_hidden_window.yml	38
2497	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/detect_psexec_with_accepteula_flag.yml	38
2498	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___execution_policy_bypass.yml	38
2499	T1059.001	Yes	https://github.com/splunk/security-content/blob/develop/detections/malicious_powershell_process___multiple_suspicious_command_line_arguments.yml	38
2500	T1086	No	-	46

The file is too large to be shown. View Raw

7.6 MiB Raw Permalink Blame History

7.6 MiB

Raw Permalink Blame History