We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent f9504ae commit c6048b1Copy full SHA for c6048b1
datasets/attack_techniques/T1059/vmtoolsd/vmtoolsd_execution.yml
@@ -4,7 +4,7 @@ date: '2025-07-30'
4
description: 'Sample of Sysmon events showing execution of commands on a host via VMWare Tools.'
5
environment: custom
6
dataset:
7
-- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1059/vmtoolsd_execution/vmtoolsd_execution.log
+- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1059/vmtoolsd/vmtoolsd_execution.log
8
sourcetypes:
9
- XmlWinEventLog:Microsoft-Windows-Sysmon/Operational
10
references:
0 commit comments