From dae6e5e550563fc746a518ac6dd9e5a1d87e5bd5 Mon Sep 17 00:00:00 2001 From: nasbench Date: Thu, 15 Oct 2026 18:54:24 +0200 Subject: [PATCH 1/2] Update Cisco AI Defense logs --- .../cisco_ai_defense_alerts.json | 4 ++-- .../cisco_ai_defense_alerts.yml | 13 +++++++++++++ .../cisco_ai_defense_alerts_old.yml | 11 ----------- 3 files changed, 15 insertions(+), 13 deletions(-) create mode 100644 datasets/suspicious_behaviour/cisco_ai_defense_alerts/cisco_ai_defense_alerts.yml delete mode 100644 datasets/suspicious_behaviour/cisco_ai_defense_alerts/cisco_ai_defense_alerts_old.yml diff --git a/datasets/suspicious_behaviour/cisco_ai_defense_alerts/cisco_ai_defense_alerts.json b/datasets/suspicious_behaviour/cisco_ai_defense_alerts/cisco_ai_defense_alerts.json index 371848a60..e4ac23c44 100644 --- a/datasets/suspicious_behaviour/cisco_ai_defense_alerts/cisco_ai_defense_alerts.json +++ b/datasets/suspicious_behaviour/cisco_ai_defense_alerts/cisco_ai_defense_alerts.json @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:1a04b1e34ac93143e65403b31bcc656418675fc339191bb8dc71532664f54eb4 -size 2091 +oid sha256:4ffae1d1632a59b64c639642322e3f4aed98adfd9bb7e5943d118fddc46a44b4 +size 802293 diff --git a/datasets/suspicious_behaviour/cisco_ai_defense_alerts/cisco_ai_defense_alerts.yml b/datasets/suspicious_behaviour/cisco_ai_defense_alerts/cisco_ai_defense_alerts.yml new file mode 100644 index 000000000..3b51d8259 --- /dev/null +++ b/datasets/suspicious_behaviour/cisco_ai_defense_alerts/cisco_ai_defense_alerts.yml @@ -0,0 +1,13 @@ +author: Bhavin Patel, Nasreddine Bencherchali, Splunk +id: cf60356c-61a4-452f-96f6-c48a6d19b20a +date: '2026-10-15' +description: This dataset is from a demo environment for cisco:ai:defense +environment: NA +mitre_technique: [] +datasets: + - name: cisco_ai_defense_alerts + path: /datasets/suspicious_behaviour/cisco_ai_defense_alerts/cisco_ai_defense_alerts.json + sourcetype: cisco:ai:defense + source: not_applicable +references: + - https://newsroom.cisco.com/c/r/newsroom/en/us/a/y2025/m01/cisco-unveils-ai-defense-to-secure-the-ai-transformation-of-enterprises.html diff --git a/datasets/suspicious_behaviour/cisco_ai_defense_alerts/cisco_ai_defense_alerts_old.yml b/datasets/suspicious_behaviour/cisco_ai_defense_alerts/cisco_ai_defense_alerts_old.yml deleted file mode 100644 index 06e375556..000000000 --- a/datasets/suspicious_behaviour/cisco_ai_defense_alerts/cisco_ai_defense_alerts_old.yml +++ /dev/null @@ -1,11 +0,0 @@ -author: Bhavin Patel -id: cf60356c-61a4-452f-96f6-c48a6d19b20a -date: '2025-02-15' -description: This dataset is from a demo environment for cisco:ai:defense -environment: NA -dataset: -- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/suspicious_behaviour/cisco_ai_defense_alerts/cisco_ai_defense.log -sourcetypes: -- cisco:ai:defense -references: -- https://newsroom.cisco.com/c/r/newsroom/en/us/a/y2025/m01/cisco-unveils-ai-defense-to-secure-the-ai-transformation-of-enterprises.html \ No newline at end of file From d8e40d715c133bdff7a713e8cb11972326ec3144 Mon Sep 17 00:00:00 2001 From: nasbench Date: Thu, 15 Oct 2026 18:55:44 +0200 Subject: [PATCH 2/2] remove ref --- .../cisco_ai_defense_alerts/cisco_ai_defense_alerts.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/datasets/suspicious_behaviour/cisco_ai_defense_alerts/cisco_ai_defense_alerts.yml b/datasets/suspicious_behaviour/cisco_ai_defense_alerts/cisco_ai_defense_alerts.yml index 3b51d8259..2f3e61a10 100644 --- a/datasets/suspicious_behaviour/cisco_ai_defense_alerts/cisco_ai_defense_alerts.yml +++ b/datasets/suspicious_behaviour/cisco_ai_defense_alerts/cisco_ai_defense_alerts.yml @@ -9,5 +9,3 @@ datasets: path: /datasets/suspicious_behaviour/cisco_ai_defense_alerts/cisco_ai_defense_alerts.json sourcetype: cisco:ai:defense source: not_applicable -references: - - https://newsroom.cisco.com/c/r/newsroom/en/us/a/y2025/m01/cisco-unveils-ai-defense-to-secure-the-ai-transformation-of-enterprises.html