This commit is contained in:
Pete Bryan 2021-03-08 13:15:13 -08:00
Родитель 5c7e705f4a
Коммит df9747f59b
1 изменённых файлов: 1 добавлений и 1 удалений

Просмотреть файл

@ -45,7 +45,7 @@ relevantTechniques:
- T1190
query: |
let iocs = externaldata(DateAdded:string,FirstSeen:string,IoC:string,Type:string,TLP:string)
[@"https://raw.githubusercontent.com/Azure/Azure-Sentinel/e2113c709e692229cefe7fa43da3979c543d0945/Sample%20Data/Feeds/MSTICIoCs-ExchangeServerVulnerabilitiesDisclosedMarch2021.csv"] with (format="csv", ignoreFirstRecord=True);
[@"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Sample%20Data/Feeds/MSTICIoCs-ExchangeServerVulnerabilitiesDisclosedMarch2021.csv"] with (format="csv", ignoreFirstRecord=True);
let file_paths = (iocs | where Type =~ "filepath");
let sha256s = (iocs | where Type =~ "sha256");
let ips = (iocs | where Type =~ "ip");