Agent: Add prefix `attack-` to attack tecniques tags

This commit is contained in:
Ilija Lazoroski 2022-08-16 14:25:28 +02:00
parent c18ceff85d
commit d38a386f67
1 changed files with 3 additions and 3 deletions

View File

@ -16,9 +16,9 @@ logger = logging.getLogger(__name__)
DEFAULT_DIRS = ["/.ssh/", "/"]
SSH_CREDENTIAL_COLLECTOR_TAG = "SSHCredentialsStolen"
T1003_ATTACK_TECHNIQUE_TAG = "T1003"
T1005_ATTACK_TECHNIQUE_TAG = "T1005"
T1145_ATTACK_TECHNIQUE_TAG = "T1145"
T1003_ATTACK_TECHNIQUE_TAG = "attack-t1003"
T1005_ATTACK_TECHNIQUE_TAG = "attack-t1005"
T1145_ATTACK_TECHNIQUE_TAG = "attack-t1145"
SSH_COLLECTOR_EVENT_TAG = {
SSH_CREDENTIAL_COLLECTOR_TAG,