New dataset

splunk · May 31, 2023 · e749908 · e749908
1 parent 415053f
commit e749908
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/datasets/attack_techniques/T1562.008/stop_delete_cloudtrail/amazon_security_lake.json b/datasets/attack_techniques/T1562.008/stop_delete_cloudtrail/amazon_security_lake.json
diff --git a/datasets/attack_techniques/T1562.008/stop_delete_cloudtrail/stop_delete_cloudtrail.yml b/datasets/attack_techniques/T1562.008/stop_delete_cloudtrail/stop_delete_cloudtrail.yml
@@ -5,7 +5,9 @@ description: Dataset which contains cloudtrail events when a cloudtrail is stopp
 environment: attack_range
 dataset:
 - https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1562.008/stop_delete_cloudtrail/aws_cloudtrail_events.json
+- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1562.008/stop_delete_cloudtrail/amazon_security_lake.json
 sourcetypes:
 - aws:cloudtrail
+- aws:asl
 references:
 - https://attack.mitre.org/techniques/T1562/008/