diff --git a/datasets/attack_techniques/T1053.005/lateral_movement/lateral_movement.yml b/datasets/attack_techniques/T1053.005/lateral_movement/lateral_movement.yml index 805b75dac..003f6517b 100644 --- a/datasets/attack_techniques/T1053.005/lateral_movement/lateral_movement.yml +++ b/datasets/attack_techniques/T1053.005/lateral_movement/lateral_movement.yml @@ -12,3 +12,7 @@ datasets: path: /datasets/attack_techniques/T1053.005/lateral_movement/windows-sysmon.log sourcetype: XmlWinEventLog source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational +- name: windows-security + path: /datasets/attack_techniques/T1053.005/lateral_movement/windows-security-task.log + sourcetype: XmlWinEventLog + source: XmlWinEventLog:Security diff --git a/datasets/attack_techniques/T1053.005/lateral_movement/windows-security-task.log b/datasets/attack_techniques/T1053.005/lateral_movement/windows-security-task.log new file mode 100644 index 000000000..3f7f05db0 --- /dev/null +++ b/datasets/attack_techniques/T1053.005/lateral_movement/windows-security-task.log @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:fdfe5a2436d1ed610384101a4b1291509f66d5130b4e6bc0f459f202e3a2831a +size 3595