remove risk_score field from all

detections. this is a calculated
field and should not be included
This commit is contained in:
pyth0n1c
2024-11-06 17:03:46 -08:00
parent ad42cb18ce
commit 486aafb64d
1698 changed files with 1 additions and 1698 deletions
@@ -42,7 +42,6 @@ tags:
- Splunk Cloud
required_fields:
- _time
risk_score: 9
security_domain: endpoint
tests:
- name: True Positive Test