From e35ee48d913b0cc001bd20bab122e8c38256764d Mon Sep 17 00:00:00 2001 From: Teoderick Contreras Date: Fri, 31 Jul 2026 13:41:13 +0200 Subject: [PATCH] vidar --- .../vidar_azure_file_access/azure_vidar_access.log | 3 +++ .../vidar_azure_file_access.yml | 13 +++++++++++++ 2 files changed, 16 insertions(+) create mode 100644 datasets/attack_techniques/T1528/vidar_azure_file_access/azure_vidar_access.log create mode 100644 datasets/attack_techniques/T1528/vidar_azure_file_access/vidar_azure_file_access.yml diff --git a/datasets/attack_techniques/T1528/vidar_azure_file_access/azure_vidar_access.log b/datasets/attack_techniques/T1528/vidar_azure_file_access/azure_vidar_access.log new file mode 100644 index 000000000..5388b4183 --- /dev/null +++ b/datasets/attack_techniques/T1528/vidar_azure_file_access/azure_vidar_access.log @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:00a05916d695967c3530d2f88ece174fbde2b8bff4a8fe634ba8ad8e8a9bf464 +size 11945 diff --git a/datasets/attack_techniques/T1528/vidar_azure_file_access/vidar_azure_file_access.yml b/datasets/attack_techniques/T1528/vidar_azure_file_access/vidar_azure_file_access.yml new file mode 100644 index 000000000..091e838bf --- /dev/null +++ b/datasets/attack_techniques/T1528/vidar_azure_file_access/vidar_azure_file_access.yml @@ -0,0 +1,13 @@ +author: Teoderick Contreras, Splunk +id: 9e38a878-8cd3-11f1-a4f8-629be3538068 +date: '2026-07-31' +description: Generated datasets for vidar azure file access in attack range. +environment: attack_range +directory: vidar_azure_file_access +mitre_technique: +- T1528 +datasets: +- name: azure_vidar_access.log + path: /datasets/attack_techniques/T1528/vidar_azure_file_access/azure_vidar_access.log + sourcetype: 'XmlWinEventLog' + source: 'XmlWinEventLog:Security' \ No newline at end of file