Merge pull request #1137 from splunk/mac_data

RavenTait · web-flow · commit b0a50ca1c752 · 2026-02-26T13:04:56.000-05:00
Add aditional mac data
diff --git a/datasets/attack_techniques/T1553.001/osquery_gatekeeper/osquery.log b/datasets/attack_techniques/T1553.001/osquery_gatekeeper/osquery.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5f649d969aeeb867bd77d0b8412533f832a76ce0f676b24b53426d514273a528
+size 3403
diff --git a/datasets/attack_techniques/T1553.001/osquery_gatekeeper/osquery.yml b/datasets/attack_techniques/T1553.001/osquery_gatekeeper/osquery.yml
@@ -0,0 +1,12 @@
+author: Raven Tait
+id: 5eeb597e-c6e4-4bd2-8f1e-809dabfeec54
+date: '2026-02-26'
+description: Generation of Mac OSX techniques logged with osquery
+environment: attack_range
+mitre_technique:
+- T1553.001
+datasets:
+- name: osquery:results
+  sourcetype: osquery:results
+  source: osquery:results
+  path: /datasets/attack_techniques/T1553.001/osquery_gatekeeper/osquery.log

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+version https://git-lfs.github.com/spec/v1`
	`2`	`+oid sha256:5f649d969aeeb867bd77d0b8412533f832a76ce0f676b24b53426d514273a528`
	`3`	`+size 3403`