IIS PSWA

splunk · Sep 30, 2024 · f73990b · f73990b
1 parent a81d20d
commit f73990b
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/datasets/attack_techniques/T1190/pswa/iis_pswaaccess.log b/datasets/attack_techniques/T1190/pswa/iis_pswaaccess.log
diff --git a/datasets/attack_techniques/T1190/pswa/pswa.yml b/datasets/attack_techniques/T1190/pswa/pswa.yml
@@ -5,8 +5,11 @@ description: Generation of data for the PowerShell Web Access (PSWA).
 environment: attack_range
 dataset:
 - https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1190/pswa/4648_pswa_pool.log
+- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1190/pswa/iis_pswaaccess.log
 sourcetypes:
 - ms:iis:splunk
 - XmlWinEventLog
 references:
-  - https://attack.mitre.org/techniques/T1190
+  - https://attack.mitre.org/techniques/T1190
+
+