There was an error while loading. Please reload this page.
1 parent a0878ae commit dd57d18Copy full SHA for dd57d18
2 files changed
datasets/attack_techniques/T1114.001/windows_email_files_outside_email_dir/sysmon.log
@@ -0,0 +1,3 @@
1
+version https://git-lfs.github.com/spec/v1
2
+oid sha256:621fefb35d002eeab9143d4aab0207ddb0908fb71be99be9d18b382659b19271
3
+size 984
datasets/attack_techniques/T1114.001/windows_email_files_outside_email_dir/sysmon.yml
@@ -0,0 +1,12 @@
+author: Nasreddine Bencherchali
+id: 594e402a-dcab-4608-bcbf-7cd7c1a19391
+date: '2026-07-01'
4
+description: Sample events containing emails files being created outside of common directories
5
+environment: custom
6
+mitre_technique:
7
+- T1114.001
8
+datasets:
9
+- name: emails_outside_dir_sysmon
10
+ sourcetype: XmlWinEventLog
11
+ source: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational
12
+ path: /datasets/attack_techniques/T1114.001/windows_email_files_outside_email_dir/sysmon.log
0 commit comments