Merge pull request #1068 from splunk/wsus-sa

RavenTait · web-flow · commit e85e7c433c4b · 2025-10-29T14:22:55.000-04:00
WSUS Windows Application Logs
diff --git a/datasets/attack_techniques/T1505.003/T1505.003.yml b/datasets/attack_techniques/T1505.003/T1505.003.yml
@@ -44,3 +44,7 @@ datasets:
   path: /datasets/attack_techniques/T1505.003/wsus-suricata.log
   sourcetype: suricata
   source: suricata
+- name: wsus-7053-windows-application
+  path: /datasets/attack_techniques/T1505.003/wsus-7053-windows-application.log
+  sourcetype: XmlWinEventLog
+  source: XmlWinEventLog:Application
diff --git a/datasets/attack_techniques/T1505.003/wsus-7053-windows-application.log b/datasets/attack_techniques/T1505.003/wsus-7053-windows-application.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:350a0727a1aa890a628315fbe1b577cf0cd75dcda66d38131a449b9478c4c4d1
+size 6385

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+version https://git-lfs.github.com/spec/v1`
	`2`	`+oid sha256:350a0727a1aa890a628315fbe1b577cf0cd75dcda66d38131a449b9478c4c4d1`
	`3`	`+size 6385`