Skip to content

Commit

Permalink
re-running all the data
Browse files Browse the repository at this point in the history
  • Loading branch information
test committed Feb 1, 2025
1 parent 2f2533d commit bc1ac9a
Show file tree
Hide file tree
Showing 3,169 changed files with 205,853 additions and 192,538 deletions.
The diff you're trying to view is too large. We only load the first 3000 changed files.
12 changes: 6 additions & 6 deletions data/dnsmitm-with-json/0/attacker-data/bash-data.txt
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{"TimeStamp":"2025-01-23T21:03:28.368773046Z","Host":"attacker","User":"blankcanvas","Count":10,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1737666183,/home/blankcanvas,sudo /bin/bash -c 'echo www.google.com A 10.1.2.4 >> /etc/ettercap/etter.dns',,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:28.531575809Z","Host":"attacker","User":"blankcanvas","Count":12,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1737666208,/home/blankcanvas,sudo kill $(ps -e | grep ettercap | awk '{print $1}'),,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:28.690108291Z","Host":"attacker","User":"blankcanvas","Count":6,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1737666166,/home/blankcanvas,sudo rm -rf /var/log/discern/data/*,,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:28.723379817Z","Host":"attacker","User":"blankcanvas","Count":7,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1737666173,/home/blankcanvas,sudo systemctl restart discern-proc,,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:28.758374435Z","Host":"attacker","User":"blankcanvas","Count":8,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1737666183,/home/blankcanvas,sudo /bin/bash -c 'echo *.google.com A 10.1.2.4 >> /etc/ettercap/etter.dns',,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:28.793299171Z","Host":"attacker","User":"blankcanvas","Count":9,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1737666183,/home/blankcanvas,sudo /bin/bash -c 'echo google.com A 10.1.2.4 >> /etc/ettercap/etter.dns',,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370215","Host":"attacker","User":"blankcanvas","Count":10,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1738370190,/home/blankcanvas,sudo /bin/bash -c 'echo www.google.com A 10.1.2.4 >> /etc/ettercap/etter.dns',,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370215","Host":"attacker","User":"blankcanvas","Count":12,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1738370213,/home/blankcanvas,sudo kill $(ps -e | grep ettercap | awk '{print $1}'),,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370215","Host":"attacker","User":"blankcanvas","Count":6,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1738370172,/home/blankcanvas,sudo rm -rf /var/log/discern/data/*,,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370215","Host":"attacker","User":"blankcanvas","Count":7,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1738370180,/home/blankcanvas,sudo systemctl restart discern-proc,,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370215","Host":"attacker","User":"blankcanvas","Count":8,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1738370189,/home/blankcanvas,sudo /bin/bash -c 'echo *.google.com A 10.1.2.4 >> /etc/ettercap/etter.dns',,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370215","Host":"attacker","User":"blankcanvas","Count":9,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1738370189,/home/blankcanvas,sudo /bin/bash -c 'echo google.com A 10.1.2.4 >> /etc/ettercap/etter.dns',,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
23 changes: 11 additions & 12 deletions data/dnsmitm-with-json/0/attacker-data/cpu-load-data.txt
View file
Original file line number Diff line number Diff line change
@@ -1,12 +1,11 @@
{"TimeStamp":"2025-01-23T21:02:46.976031941Z","Load":[13.725490196078733],"DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:02:52.978941365Z","Load":[1.010101010100082],"DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:02:58.986081133Z","Load":[0],"DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:04.991956888Z","Load":[31.914893617020635],"DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:10.999911104Z","Load":[99.99999999999856],"DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:17.007937734Z","Load":[100],"DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:23.015924034Z","Load":[100],"DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:29.023917622Z","Load":[70.10309278350388],"DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:35.028002653Z","Load":[4.0404040404032],"DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:41.032559237Z","Load":[15.151515151515587],"DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:47.039125153Z","Load":[9.000000000000341],"DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:53.048361147Z","Load":[0],"DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370174", "Load":[0], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370180", "Load":[26.999999999999602], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370186", "Load":[7.070707070707752], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370192", "Load":[100], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370198", "Load":[99.99999999999858], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370204", "Load":[99.99999999999858], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370210", "Load":[99.99999999999856], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370216", "Load":[27.17391304347947], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370222", "Load":[14.285714285714906], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370228", "Load":[2.9702970297029423], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370234", "Load":[0], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
72 changes: 36 additions & 36 deletions data/dnsmitm-with-json/0/attacker-data/file-data.txt
View file
Original file line number Diff line number Diff line change
@@ -1,36 +1,36 @@
{"TimeStamp":"2025-01-23T21:02:49.746423348Z","Op":2,"Location":"/tmp/count.blankcanvas","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:02:49.760656659Z","Op":1,"Location":"/tmp/sshcmds.22757.sh","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:02:49.768348466Z","Op":2,"Location":"/tmp/sshcmds.22757.sh","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:02:49.777969418Z","Op":4,"Location":"/tmp/sshcmds.22757.sh","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:02:53.958347078Z","Op":2,"Location":"/tmp/count.blankcanvas","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:02:53.963803817Z","Op":2,"Location":"/tmp/count.blankcanvas","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:02:53.984364105Z","Op":1,"Location":"/tmp/sshcmds.28680.sh","Permissions":420,"Owner":"blankcanvas","Group":"blankcanvas","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:02:53.990950318Z","Op":2,"Location":"/tmp/sshcmds.28680.sh","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:02:54.003678978Z","Op":4,"Location":"/tmp/sshcmds.28680.sh","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:03.199132661Z","Op":2,"Location":"/tmp/count.blankcanvas","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:03.205452189Z","Op":2,"Location":"/tmp/count.blankcanvas","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:03.221917533Z","Op":1,"Location":"/tmp/sshcmds.2379.sh","Permissions":420,"Owner":"blankcanvas","Group":"blankcanvas","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:03.228406063Z","Op":2,"Location":"/tmp/sshcmds.2379.sh","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:03.234872013Z","Op":4,"Location":"/tmp/sshcmds.2379.sh","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:03.577331823Z","Op":2,"Location":"/tmp/count.blankcanvas","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:03.584522312Z","Op":2,"Location":"/tmp/count.blankcanvas","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:03.596265326Z","Op":1,"Location":"/tmp/sshcmds.22283.sh","Permissions":420,"Owner":"blankcanvas","Group":"blankcanvas","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:03.603483326Z","Op":2,"Location":"/tmp/sshcmds.22283.sh","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:03.610980689Z","Op":4,"Location":"/tmp/sshcmds.22283.sh","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:03.952092822Z","Op":2,"Location":"/tmp/count.blankcanvas","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:03.975466481Z","Op":2,"Location":"/tmp/count.blankcanvas","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:03.986974224Z","Op":1,"Location":"/tmp/sshcmds.23141.sh","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:03.992116107Z","Op":2,"Location":"/tmp/sshcmds.23141.sh","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:04.004205636Z","Op":4,"Location":"/tmp/sshcmds.23141.sh","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:04.352147748Z","Op":2,"Location":"/tmp/count.blankcanvas","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:04.358200132Z","Op":2,"Location":"/tmp/count.blankcanvas","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:04.401954422Z","Op":1,"Location":"/tmp/sshcmds.8707.sh","Permissions":420,"Owner":"blankcanvas","Group":"blankcanvas","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:04.405795029Z","Op":2,"Location":"/tmp/sshcmds.8707.sh","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:28.088273940Z","Op":2,"Location":"/tmp/count.blankcanvas","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:28.094657136Z","Op":2,"Location":"/tmp/count.blankcanvas","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:28.120457634Z","Op":1,"Location":"/tmp/sshcmds.23861.sh","Permissions":420,"Owner":"blankcanvas","Group":"blankcanvas","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:28.128238467Z","Op":2,"Location":"/tmp/sshcmds.23861.sh","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:28.155394960Z","Op":4,"Location":"/tmp/sshcmds.23861.sh","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:31.194663831Z","Op":4,"Location":"/tmp/sshcmds.8707.sh","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:54.481962485Z","Op":2,"Location":"/tmp/count.blankcanvas","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"2025-01-23T21:03:54.486948123Z","Op":2,"Location":"/tmp/count.blankcanvas","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370176", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370176", "Op":1, "Location":"/tmp/sshcmds.16532.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370176", "Op":2, "Location":"/tmp/sshcmds.16532.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370176", "Op":4, "Location":"/tmp/sshcmds.16532.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370180", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370180", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370180", "Op":1, "Location":"/tmp/sshcmds.27632.sh", "Permissions":420, "Owner":"blankcanvas", "Group":"blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370180", "Op":2, "Location":"/tmp/sshcmds.27632.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370180", "Op":4, "Location":"/tmp/sshcmds.27632.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":1, "Location":"/tmp/sshcmds.20310.sh", "Permissions":420, "Owner":"blankcanvas", "Group":"blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":2, "Location":"/tmp/sshcmds.20310.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":4, "Location":"/tmp/sshcmds.20310.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":1, "Location":"/tmp/sshcmds.30403.sh", "Permissions":420, "Owner":"blankcanvas", "Group":"blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":2, "Location":"/tmp/sshcmds.30403.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":4, "Location":"/tmp/sshcmds.30403.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370190", "Op":1, "Location":"/tmp/sshcmds.16788.sh", "Permissions":420, "Owner":"blankcanvas", "Group":"blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370190", "Op":2, "Location":"/tmp/sshcmds.16788.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370190", "Op":4, "Location":"/tmp/sshcmds.16788.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370190", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370190", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370190", "Op":1, "Location":"/tmp/sshcmds.24033.sh", "Permissions":420, "Owner":"blankcanvas", "Group":"blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370190", "Op":2, "Location":"/tmp/sshcmds.24033.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370213", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370213", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370213", "Op":1, "Location":"/tmp/sshcmds.4136.sh", "Permissions":420, "Owner":"blankcanvas", "Group":"blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370213", "Op":2, "Location":"/tmp/sshcmds.4136.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370214", "Op":4, "Location":"/tmp/sshcmds.4136.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370217", "Op":4, "Location":"/tmp/sshcmds.24033.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370240", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370240", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
Loading

0 comments on commit bc1ac9a

Please sign in to comment.