From 4218dbae7dcf0d4a147f441cd1521aa823a49816 Mon Sep 17 00:00:00 2001
From: James Spiteri <james.spiteri@gmail.com>
Date: Fri, 10 Mar 2023 15:26:53 -0700
Subject: [PATCH 1/3] Add oh my malware event datasets

---
 README.html | 1 +
 README.md   | 2 ++
 2 files changed, 3 insertions(+)

diff --git a/README.html b/README.html
index 3e3816f..d8ec9b8 100644
--- a/README.html
+++ b/README.html
@@ -161,6 +161,7 @@
 <li><a href="https://github.com/sbousseaden/EVTX-ATTACK-SAMPLES">EVTX-ATTACK-SAMPLES</a> - A repo of Windows event samples (EVTX) associated with ATT&amp;CK techniques (<a href="https://docs.google.com/spreadsheets/d/12V5T9j6Fi3JSmMpAsMwovnWqRFKzzI9l2iXS5dEsnrs/edit#gid=164587082">EVTX-ATT&CK Sheet</a>).</li>
 <li><a href="http://log-sharing.dreamhosters.com">Public Security Log Sharing Site</a></li>
 <li><a href="https://github.com/splunk/attack_data">attack_data</a> - A repository of curated datasets from various attacks.</li>
+<li><a href="https://github.com/jamesspi/ohmymalware/tree/main/Event%20Data">Oh My Malware - Event Data</a> - A repository of malware datasets and alerts generated and used during episodes published on <a href="ohmymalware.com">ohmymalware.com</a>.</li>
 </ul>
 <h2 id="resources">Resources</h2>
 <ul>
diff --git a/README.md b/README.md
index c91332e..81698b2 100644
--- a/README.md
+++ b/README.md
@@ -156,6 +156,8 @@
 - [EVTX-ATTACK-SAMPLES](https://github.com/sbousseaden/EVTX-ATTACK-SAMPLES) - A repo of Windows event samples (EVTX) associated with ATT&CK techniques ([EVTX-ATT&CK Sheet](https://docs.google.com/spreadsheets/d/12V5T9j6Fi3JSmMpAsMwovnWqRFKzzI9l2iXS5dEsnrs/edit#gid=164587082)).
 - [Public Security Log Sharing Site](http://log-sharing.dreamhosters.com)
 - [attack_data](https://github.com/splunk/attack_data) - A repository of curated datasets from various attacks.
+- [Oh My Malware - Event Data](https://github.com/jamesspi/ohmymalware/tree/main/Event%20Data) - A repository of malware datasets and alerts generated and used during episodes published on ohmymalware.com.</li>
+
 
 
 ## Resources

From 0512e1ed7b9179282f5cef89796bebe5ef5b3dd0 Mon Sep 17 00:00:00 2001
From: James Spiteri <james.spiteri@gmail.com>
Date: Fri, 10 Mar 2023 15:28:41 -0700
Subject: [PATCH 2/3] remove extra chars

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 81698b2..9223964 100644
--- a/README.md
+++ b/README.md
@@ -156,7 +156,7 @@
 - [EVTX-ATTACK-SAMPLES](https://github.com/sbousseaden/EVTX-ATTACK-SAMPLES) - A repo of Windows event samples (EVTX) associated with ATT&CK techniques ([EVTX-ATT&CK Sheet](https://docs.google.com/spreadsheets/d/12V5T9j6Fi3JSmMpAsMwovnWqRFKzzI9l2iXS5dEsnrs/edit#gid=164587082)).
 - [Public Security Log Sharing Site](http://log-sharing.dreamhosters.com)
 - [attack_data](https://github.com/splunk/attack_data) - A repository of curated datasets from various attacks.
-- [Oh My Malware - Event Data](https://github.com/jamesspi/ohmymalware/tree/main/Event%20Data) - A repository of malware datasets and alerts generated and used during episodes published on ohmymalware.com.</li>
+- [Oh My Malware - Event Data](https://github.com/jamesspi/ohmymalware/tree/main/Event%20Data) - A repository of malware datasets and alerts generated and used during episodes published on ohmymalware.com.
 
 
 

From 2737509fc8f4f3c709f6d3fb2abeb561601b89af Mon Sep 17 00:00:00 2001
From: James Spiteri <james.spiteri@gmail.com>
Date: Fri, 10 Mar 2023 15:32:05 -0700
Subject: [PATCH 3/3] Add Oh My Malware Resource

---
 README.html | 1 +
 README.md   | 1 +
 2 files changed, 2 insertions(+)

diff --git a/README.html b/README.html
index d8ec9b8..e1aca82 100644
--- a/README.html
+++ b/README.html
@@ -205,6 +205,7 @@
 <li>Detection as Code in Splunk <a href="https://www.splunk.com/en_us/blog/security/ci-cd-detection-engineering-splunk-security-content-part-1.html">Part 1, </a><a href="https://www.splunk.com/en_us/blog/security/ci-cd-detection-engineering-splunk-s-attack-range-part-2.html">Part 2, </a><a href="https://www.splunk.com/en_us/blog/security/ci-cd-detection-engineering-failing-part-3.html">and Part 3</a> - A multipart series describing how detection as code can be successfully deployed in a Splunk environment.</li>
 <li><a href="https://medium.com/starting-up-security/lessons-learned-in-detection-engineering-304aec709856">Lessons Learned in Detection Engineering</a> - A well experienced detection engineer describes in detail his observations, challenges, and recommendations for building an effective threat detection program.</li>
 <li><a href="https://ateixei.medium.com/a-research-driven-process-applied-to-threat-detection-engineering-inputs-1b7e6fe0412b">A Research-Driven process applied to Threat Detection Engineering Inputs</a>.</li>
+<li><a href="https://ohmymalware.com">A video series focused on malware execution and investigations using Elastic Security</a>.</li>
 </ul>
 <h3 id="frameworks">Frameworks</h3>
 <ul>
diff --git a/README.md b/README.md
index 9223964..34e81dc 100644
--- a/README.md
+++ b/README.md
@@ -203,6 +203,7 @@
 - [Lessons Learned in Detection Engineering](https://medium.com/starting-up-security/lessons-learned-in-detection-engineering-304aec709856) - A well experienced detection engineer describes in detail his observations, challenges, and recommendations for building an effective threat detection program.
 - [A Research-Driven process applied to Threat Detection Engineering Inputs](https://ateixei.medium.com/a-research-driven-process-applied-to-threat-detection-engineering-inputs-1b7e6fe0412b).
 - [Investigation Scenario](https://twitter.com/search?q=%23InvestigationPath%20from%3Achrissanders88&f=live) tweets by Chris Sanders
+- [Oh My Malware](https://ohmymalware.com)A video series focused on malware execution and investigations using Elastic Security.
 
 ### Frameworks