From 5d4dcd29385939d07dd9eb9dbf75e1ad7d5e34cf Mon Sep 17 00:00:00 2001 From: nasbench Date: Tue, 14 Jul 2026 20:24:14 +0200 Subject: [PATCH] update nvm data --- .../cisco_nvm_flowdata/nvm_flowdata.log | 4 ++-- .../cisco_nvm_flowdata/nvm_flowdata.yml | 11 +++++++++++ .../cisco_nvm_flowdata/nvm_flowdata_old.yml | 11 ----------- 3 files changed, 13 insertions(+), 13 deletions(-) create mode 100644 datasets/cisco_network_visibility_module/cisco_nvm_flowdata/nvm_flowdata.yml delete mode 100644 datasets/cisco_network_visibility_module/cisco_nvm_flowdata/nvm_flowdata_old.yml diff --git a/datasets/cisco_network_visibility_module/cisco_nvm_flowdata/nvm_flowdata.log b/datasets/cisco_network_visibility_module/cisco_nvm_flowdata/nvm_flowdata.log index 1f29d08da..3dffbbc41 100644 --- a/datasets/cisco_network_visibility_module/cisco_nvm_flowdata/nvm_flowdata.log +++ b/datasets/cisco_network_visibility_module/cisco_nvm_flowdata/nvm_flowdata.log @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:1a98da08c00e1890e7ffadeb1e47060e2ab5d6829ebe61ca9727a4727129665c -size 238759 +oid sha256:ee31bebad80056a8ffc9c289f85c852a437c7bbee21f495e7507926c01f9c4cb +size 255780 diff --git a/datasets/cisco_network_visibility_module/cisco_nvm_flowdata/nvm_flowdata.yml b/datasets/cisco_network_visibility_module/cisco_nvm_flowdata/nvm_flowdata.yml new file mode 100644 index 000000000..d800741dc --- /dev/null +++ b/datasets/cisco_network_visibility_module/cisco_nvm_flowdata/nvm_flowdata.yml @@ -0,0 +1,11 @@ +author: Nasreddine Bencherchali, Splunk +id: a0b50980-bad7-4f55-be33-3210f3902bdc +date: '2025-06-23' +description: Generated datasets for Cisco Network Visibility Module Flow Data EventType. +environment: custom +mitre_technique: [] +datasets: +- name: nvm_flowdata + path: /datasets/cisco_network_visibility_module/cisco_nvm_flowdata/nvm_flowdata.log + source: not_applicable + sourcetype: cisco:nvm:flowdata:v2 diff --git a/datasets/cisco_network_visibility_module/cisco_nvm_flowdata/nvm_flowdata_old.yml b/datasets/cisco_network_visibility_module/cisco_nvm_flowdata/nvm_flowdata_old.yml deleted file mode 100644 index 8a471ba9c..000000000 --- a/datasets/cisco_network_visibility_module/cisco_nvm_flowdata/nvm_flowdata_old.yml +++ /dev/null @@ -1,11 +0,0 @@ -author: Nasreddine Bencherchali, Splunk -id: a0b50980-bad7-4f55-be33-3210f3902bdc -date: '2025-06-23' -description: Generated datasets for Cisco Network Visibility Module Flow Data EventType. -dataset: -- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/cisco_network_visibility_module/cisco_nvm_flowdata/nvm_flowdata.log -sourcetypes: -- cisco:nvm:flowdata -references: -- https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/Cisco-Secure-Client-5/admin/guide/nvm-collector-5-1-1-admin-guide.html -- https://community.cisco.com/t5/security-knowledge-base/cisco-network-visibility-nvm-collector/ta-p/4309825