Skip to content

Dataset: T1561.001 - Microsoft Intune Bulk Wipe#1150

Merged
ljstella merged 2 commits intosplunk:masterfrom
jakeenea51:bulk_wipe
Mar 30, 2026
Merged

Dataset: T1561.001 - Microsoft Intune Bulk Wipe#1150
ljstella merged 2 commits intosplunk:masterfrom
jakeenea51:bulk_wipe

Conversation

@jakeenea51
Copy link
Copy Markdown
Contributor

Adding dataset for simulated bulk wipe actions in the Microsoft Intune admin portal.

Associated with PR #3978 (Detection: Microsoft Intune Bulk Wipe Detected) in the splunk/security_content repo.

@ljstella
Copy link
Copy Markdown
Contributor

},
  request: {
    method: 'POST',
    url: 'https://api.github.com/repos/splunk/attack_data/issues/1150/comments',
    headers: {
      accept: 'application/vnd.github.v3+json',
      'user-agent': 'actions/github-script octokit-core.js/5.0.1 Node.js/20.20.1 (linux; x64)',
      authorization: 'token [REDACTED]',
      'content-type': 'application/json; charset=utf-8'
    },
    body: '{"body":"✅ **Attack Data Validation Passed**\\n\\nAll YAML files in this PR have been successfully validated against the schema.\\n\\nReady for review and merge! 🚀"}',
    request: {
      agent: [Agent],
      fetch: [Function: proxyFetch],
      hook: [Function: bound bound register]
    }
  }

Job passed

@ljstella ljstella requested review from ljstella March 30, 2026 19:37
Copy link
Copy Markdown
Contributor

@ljstella ljstella left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@ljstella ljstella merged commit c81e500 into splunk:master Mar 30, 2026
1 of 2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants