admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #3206 from splunk/auto-ta-update-84

Browse Source 
Automated Splunk TA Update 84
This commit is contained in:
Bhavin Patel
2024-11-14 10:13:38 -08:00
committed by GitHub
parent 738216af0f 7bbed8dc3d
commit 1232eaa5c8
61 changed files with 61 additions and 61 deletions
Download Patch File Download Diff File Expand all files Collapse all files
data_sources/powershell_script_block_logging_4104.yml
+1 -1
View File
@@ -9,7 +9,7 @@ sourcetype: xmlwineventlog
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ActivityID
data_sources/windows_active_directory_admon.yml
+1 -1
View File
@@ -9,7 +9,7 @@ sourcetype: ActiveDirectory
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Guid
data_sources/windows_event_log_application_2282.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Channel
data_sources/windows_event_log_application_3000.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Channel
data_sources/windows_event_log_capi2_70.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Channel
data_sources/windows_event_log_capi2_81.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Channel
data_sources/windows_event_log_certificateservicesclient_1007.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ActivityID
data_sources/windows_event_log_defender_1121.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ActivityID
data_sources/windows_event_log_defender_1122.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ActivityID
data_sources/windows_event_log_defender_1129.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ComputerName
data_sources/windows_event_log_defender_5007.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Channel
data_sources/windows_event_log_printservice_316.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ComputerName
data_sources/windows_event_log_printservice_808.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ComputerName
data_sources/windows_event_log_remoteconnectionmanager_1149.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ActivityID
data_sources/windows_event_log_security_1100.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Channel
data_sources/windows_event_log_security_1102.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Caller_User_Name
data_sources/windows_event_log_security_4624.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ActivityID
data_sources/windows_event_log_security_4625.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ActivityID
data_sources/windows_event_log_security_4627.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ActivityID
data_sources/windows_event_log_security_4648.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ActivityID
data_sources/windows_event_log_security_4662.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- AccessList
data_sources/windows_event_log_security_4663.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- AccessList
data_sources/windows_event_log_security_4672.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ActivityID
data_sources/windows_event_log_security_4688.yml
+1 -1
View File
@@ -12,7 +12,7 @@ configuration: Enabling Windows event log process command line logging via group
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- Caller_Domain
- Caller_User_Name
data_sources/windows_event_log_security_4698.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Account_Domain
data_sources/windows_event_log_security_4699.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Account_Domain
data_sources/windows_event_log_security_4703.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Caller_Domain
data_sources/windows_event_log_security_4719.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ActivityID
data_sources/windows_event_log_security_4720.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Account_Domain
data_sources/windows_event_log_security_4724.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Caller_Domain
data_sources/windows_event_log_security_4725.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Caller_Domain
data_sources/windows_event_log_security_4726.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Caller_Domain
data_sources/windows_event_log_security_4732.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Account_Domain
data_sources/windows_event_log_security_4738.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- AccountExpires
data_sources/windows_event_log_security_4739.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Caller_Domain
data_sources/windows_event_log_security_4741.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- AccountExpires
data_sources/windows_event_log_security_4742.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- AccountExpires
data_sources/windows_event_log_security_4768.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Channel
data_sources/windows_event_log_security_4769.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Channel
data_sources/windows_event_log_security_4771.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Channel
data_sources/windows_event_log_security_4776.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Channel
data_sources/windows_event_log_security_4781.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ActivityID
data_sources/windows_event_log_security_4794.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ActivityID
data_sources/windows_event_log_security_4798.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ActivityID
data_sources/windows_event_log_security_4876.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ActivityID
data_sources/windows_event_log_security_4886.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ActivityID
data_sources/windows_event_log_security_4887.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ActivityID
data_sources/windows_event_log_security_5136.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ActivityID
data_sources/windows_event_log_security_5137.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- AppCorrelationID
data_sources/windows_event_log_security_5140.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- AccessList
data_sources/windows_event_log_security_5141.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ActivityID
data_sources/windows_event_log_security_5145.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- AccessList
data_sources/windows_event_log_system_4720.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Account_Domain
data_sources/windows_event_log_system_4726.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Account_Domain
data_sources/windows_event_log_system_4728.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Account_Domain
data_sources/windows_event_log_system_7036.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Channel
data_sources/windows_event_log_system_7040.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- Channel
data_sources/windows_event_log_system_7045.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- AccountName
data_sources/windows_event_log_taskscheduler_200.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventCode
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ActionName
data_sources/windows_iis.yml
+1 -1
View File
@@ -10,4 +10,4 @@ separator: EventID
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
data_sources/windows_iis_29.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: EventID
supported_TA:
- name: Splunk Add-on for Microsoft Windows
url: https://splunkbase.splunk.com/app/742
version: 9.0.0
version: 9.0.1
fields:
- _time
- ComputerName