From 28f590bae083d38daa72c87e6bdfffc1ef219e79 Mon Sep 17 00:00:00 2001 From: Patrick Bareiss Date: Thu, 12 Dec 2024 10:15:58 +0100 Subject: [PATCH] updated cloudtrail asl datasets --- .../T1098/aws_iam_delete_policy/asl_ocsf_cloudtrail.json | 4 ++-- .../aws_iam_failure_group_deletion/asl_ocsf_cloudtrail.json | 4 ++-- .../asl_ocsf_cloudtrail.json | 4 ++-- .../aws_ecr_container_upload/asl_ocsf_cloudtrail.json | 4 ++-- .../asl_ocsf_cloudtrail.json | 4 ++-- .../T1621/aws_mfa_disabled/asl_ocsf_cloudtrail.json | 4 ++-- 6 files changed, 12 insertions(+), 12 deletions(-) diff --git a/datasets/attack_techniques/T1098/aws_iam_delete_policy/asl_ocsf_cloudtrail.json b/datasets/attack_techniques/T1098/aws_iam_delete_policy/asl_ocsf_cloudtrail.json index 3aabf2a2..9700036e 100644 --- a/datasets/attack_techniques/T1098/aws_iam_delete_policy/asl_ocsf_cloudtrail.json +++ b/datasets/attack_techniques/T1098/aws_iam_delete_policy/asl_ocsf_cloudtrail.json @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:742dde1b502eebc8b4e45adf5cd0ae057ed565e908d6d887f6a16ad970bc3b18 -size 2133 +oid sha256:a904eac8644379e46ea2a55d245e30a1779453d05f9954caf231c396f6061771 +size 2424 diff --git a/datasets/attack_techniques/T1098/aws_iam_failure_group_deletion/asl_ocsf_cloudtrail.json b/datasets/attack_techniques/T1098/aws_iam_failure_group_deletion/asl_ocsf_cloudtrail.json index 0d4324fa..8cda1d77 100644 --- a/datasets/attack_techniques/T1098/aws_iam_failure_group_deletion/asl_ocsf_cloudtrail.json +++ b/datasets/attack_techniques/T1098/aws_iam_failure_group_deletion/asl_ocsf_cloudtrail.json @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:34d03d6dc8ae4f11a52a3e12939bb1d4023a82b3eae44c2e94691a0c93a52165 -size 1785 +oid sha256:6ef2f8900380c97248f23ab8d832d1e7d3af0795e81cf9fe90786d7a58ee5adf +size 2212 diff --git a/datasets/attack_techniques/T1098/aws_iam_successful_group_deletion/asl_ocsf_cloudtrail.json b/datasets/attack_techniques/T1098/aws_iam_successful_group_deletion/asl_ocsf_cloudtrail.json index cdddb5af..18a04abb 100644 --- a/datasets/attack_techniques/T1098/aws_iam_successful_group_deletion/asl_ocsf_cloudtrail.json +++ b/datasets/attack_techniques/T1098/aws_iam_successful_group_deletion/asl_ocsf_cloudtrail.json @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:9d61e1f747f76e3e3bab20bb4db1fd380fafe03295648f9cc0327151a66c9c8a -size 2099 +oid sha256:9be77d99ae8217c4ab027b659a88a938b12ed7b37462216aba00e287ceef8b13 +size 2049 diff --git a/datasets/attack_techniques/T1204.003/aws_ecr_container_upload/asl_ocsf_cloudtrail.json b/datasets/attack_techniques/T1204.003/aws_ecr_container_upload/asl_ocsf_cloudtrail.json index c08f9485..9bed0119 100644 --- a/datasets/attack_techniques/T1204.003/aws_ecr_container_upload/asl_ocsf_cloudtrail.json +++ b/datasets/attack_techniques/T1204.003/aws_ecr_container_upload/asl_ocsf_cloudtrail.json @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:f9a003690199e07f5c00e4c7ee30b304750c965e3da913e9ed1051fba8f71400 -size 10729 +oid sha256:16d2eaf226e564bbc09ec123b1ccbc0a451aef21f1b6e52bc1ce5b90e69892a5 +size 11783 diff --git a/datasets/attack_techniques/T1556.006/aws_new_mfa_method_registered_for_user/asl_ocsf_cloudtrail.json b/datasets/attack_techniques/T1556.006/aws_new_mfa_method_registered_for_user/asl_ocsf_cloudtrail.json index e8b21398..42b75e3a 100644 --- a/datasets/attack_techniques/T1556.006/aws_new_mfa_method_registered_for_user/asl_ocsf_cloudtrail.json +++ b/datasets/attack_techniques/T1556.006/aws_new_mfa_method_registered_for_user/asl_ocsf_cloudtrail.json @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:a8db9cc75d337c59fcc8c0ba09c8ef4a4a5f4b2e5c6de4c7284f43f8755b6da3 -size 2268 +oid sha256:a4cbcf8c6d05debe74c954569ac514110bb9346f01201c008c194da2fcad3d2f +size 2473 diff --git a/datasets/attack_techniques/T1621/aws_mfa_disabled/asl_ocsf_cloudtrail.json b/datasets/attack_techniques/T1621/aws_mfa_disabled/asl_ocsf_cloudtrail.json index 2994ada8..2f67a9a4 100644 --- a/datasets/attack_techniques/T1621/aws_mfa_disabled/asl_ocsf_cloudtrail.json +++ b/datasets/attack_techniques/T1621/aws_mfa_disabled/asl_ocsf_cloudtrail.json @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:0601275ce78673653f8dd5fdc975c43b5c17e32d78af5d486e27d54996dac8cc -size 4286 +oid sha256:6e7fa5d16944c96b3f08bb797a9ba2f43d3beed1269635aefa7ce96882e59a12 +size 4905