
xmlwineventlog:microsoft-windows-sysmon/operational.Note that because the data is distributed in a pre-indexed format, there are no volume-based licensing limits to be concerned with.The BOTS v3 data will be available by searching:.Unzip/untar the downloaded file into $SPLUNK_HOME/etc/apps.It is important to match the specific version of each app and add-on. Install Splunk Enterprise and the apps/add-ons listed in the Required Software section below.Download the dataset file indicated above and check the MD5 hash to ensure integrity.If you are looking for the BOTS version 1 dataset, it can be found here. If you are looking for the BOTS version 2 dataset, it can be found here. If you would like access to the scoreboard software, please visit the CTF Scoreboard Github repository. This page hosts information regarding the version 3 dataset. A sample security dataset and CTF platform for information security professionals, researchers, students, and enthusiasts.
