diff --git a/datasets/attack_techniques/T1202/windows_browser_copy_paste/windows_browser_copy_paste.log b/datasets/attack_techniques/T1202/windows_browser_copy_paste/windows_browser_copy_paste.log new file mode 100644 index 000000000..fe90c39b1 --- /dev/null +++ b/datasets/attack_techniques/T1202/windows_browser_copy_paste/windows_browser_copy_paste.log @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:70f6dd2204db574fb26bc24675b9672bc3b694cb54ab8a85d18d2125272d30cf +size 2510 diff --git a/datasets/attack_techniques/T1202/windows_browser_copy_paste/windows_browser_copy_paste.yml b/datasets/attack_techniques/T1202/windows_browser_copy_paste/windows_browser_copy_paste.yml new file mode 100644 index 000000000..8a96b7d62 --- /dev/null +++ b/datasets/attack_techniques/T1202/windows_browser_copy_paste/windows_browser_copy_paste.yml @@ -0,0 +1,13 @@ +author: Onur Mustafa Erdogan, Splunk +id: 74f24e56-e6ad-4004-b896-a0f8b1bf927e +date: '2026-09-07' +description: Generated datasets for Content Copied from Browser in attack range. +environment: attack_range +directory: windows_browser_copy_paste +mitre_technique: +- T1202 +datasets: +- name: windows_browser_copy_paste.log + path: /datasets/attack_techniques/T1202/windows_browser_copy_paste/windows_browser_copy_paste.log + sourcetype: 'XmlWinEventLog' + source: 'XmlWinEventLog:Microsoft-Windows-Sysmon/Operational' \ No newline at end of file