From ab82bcd9060cfc8ec5708fa86ebdc6489a35ec64 Mon Sep 17 00:00:00 2001 From: mvelazco Date: Mon, 29 Mar 2021 17:23:54 -0400 Subject: [PATCH] moving package to new folder --- {package => dist/escu}/README.md | 0 .../escu}/README/essoc_story_detail.txt | 0 {package => dist/escu}/README/essoc_summary.txt | 0 .../escu}/README/essoc_usage_dashboard.txt | 0 {package => dist/escu}/app.manifest | 0 {package => dist/escu}/bin/dnstwist.py | 0 {package => dist/escu}/bin/escu_contextualize.py | 0 {package => dist/escu}/bin/escu_investigate.py | 0 {package => dist/escu}/bin/runstory.py | 0 {package => dist/escu}/bin/splunklib/__init__.py | 0 {package => dist/escu}/bin/splunklib/binding.py | 0 {package => dist/escu}/bin/splunklib/client.py | 0 {package => dist/escu}/bin/splunklib/data.py | 0 .../escu}/bin/splunklib/modularinput/__init__.py | 0 .../escu}/bin/splunklib/modularinput/argument.py | 0 .../escu}/bin/splunklib/modularinput/event.py | 0 .../bin/splunklib/modularinput/event_writer.py | 0 .../bin/splunklib/modularinput/input_definition.py | 0 .../escu}/bin/splunklib/modularinput/scheme.py | 0 .../escu}/bin/splunklib/modularinput/script.py | 0 .../escu}/bin/splunklib/modularinput/utils.py | 0 .../splunklib/modularinput/validation_definition.py | 0 {package => dist/escu}/bin/splunklib/ordereddict.py | 0 {package => dist/escu}/bin/splunklib/results.py | 0 .../escu}/bin/splunklib/searchcommands/__init__.py | 0 .../bin/splunklib/searchcommands/decorators.py | 0 .../bin/splunklib/searchcommands/environment.py | 0 .../splunklib/searchcommands/eventing_command.py | 0 .../searchcommands/external_search_command.py | 0 .../splunklib/searchcommands/generating_command.py | 0 .../escu}/bin/splunklib/searchcommands/internals.py | 0 .../splunklib/searchcommands/reporting_command.py | 0 .../bin/splunklib/searchcommands/search_command.py | 0 .../splunklib/searchcommands/streaming_command.py | 0 .../bin/splunklib/searchcommands/validators.py | 0 .../escu}/default/analytic_stories.conf | 0 {package => dist/escu}/default/analyticstories.conf | 0 {package => dist/escu}/default/app.conf | 0 {package => dist/escu}/default/collections.conf | 0 {package => dist/escu}/default/commands.conf | 0 {package => dist/escu}/default/content-version.conf | 0 .../escu}/default/data/ui/nav/default.xml | 0 ...nel_all_backup_logs_for_host___response_task.xml | 0 ...ubernetes_activity_by_src_ip___response_task.xml | 0 ..._security_hub_alerts_by_dest___response_task.xml | 0 ...er_activities_by_accesskeyid___response_task.xml | 0 ...igate_user_activities_by_arn___response_task.xml | 0 ..._network_acl_details_from_id___response_task.xml | 0 ...rface_details_via_resourceid___response_task.xml | 0 ...ucket_details_via_bucketname___response_task.xml | 0 ...ubernetes_activity_by_src_ip___response_task.xml | 0 ...t_all_aws_activity_from_city___response_task.xml | 0 ...ll_aws_activity_from_country___response_task.xml | 0 ...aws_activity_from_ip_address___response_task.xml | 0 ...all_aws_activity_from_region___response_task.xml | 0 ...get_backup_logs_for_endpoint___response_task.xml | 0 ...ertificate_logs_for_a_domain___response_task.xml | 0 ...ns_server_history_for_a_host___response_task.xml | 0 ..._panel_get_dns_traffic_ratio___response_task.xml | 0 ...stance_details_by_instanceid___response_task.xml | 0 ...panel_get_ec2_launch_details___response_task.xml | 0 ...rkbench_panel_get_email_info___response_task.xml | 0 ..._emails_from_specific_sender___response_task.xml | 0 ..._occurrence_of_a_mac_address___response_task.xml | 0 ...get_history_of_email_sources___response_task.xml | 0 ...s_modifications_for_endpoint___response_task.xml | 0 ...ights_modifications_for_user___response_task.xml | 0 ...ch_panel_get_notable_history___response_task.xml | 0 ...o_hidden_cobra_threat_actors___response_task.xml | 0 ...anel_get_parent_process_info___response_task.xml | 0 ...el_get_process_file_activity___response_task.xml | 0 ...bench_panel_get_process_info___response_task.xml | 0 ...nformation_for_port_activity___response_task.xml | 0 ...ponsible_for_the_dns_traffic___response_task.xml | 0 ...sysmon_wmi_activity_for_host___response_task.xml | 0 ...n_information_via_session_id___response_task.xml | 0 ...s_activities_via_region_name___response_task.xml | 0 ...ser_activities_by_user_field___response_task.xml | 0 ...ns_for_multiple_destinations___response_task.xml | 0 ..._network_traffic_from_src_ip___response_task.xml | 0 ...stigate_okta_activity_by_app___response_task.xml | 0 ..._okta_activity_by_ip_address___response_task.xml | 0 ...igate_pass_the_hash_attempts___response_task.xml | 0 ...ate_pass_the_ticket_attempts___response_task.xml | 0 ...stigate_previous_unseen_user___response_task.xml | 0 ...mote_desktop_authentications___response_task.xml | 0 ...cious_strings_in_http_header___response_task.xml | 0 ...gate_user_activities_in_okta___response_task.xml | 0 ...vestigate_web_posts_from_src___response_task.xml | 0 .../escu}/default/data/ui/views/escu_summary.xml | 0 .../escu}/default/data/ui/views/escu_usage.xml | 0 .../escu}/default/data/ui/views/feedback.xml | 0 {package => dist/escu}/default/distsearch.conf | 0 .../escu}/default/es_investigations.conf | 0 {package => dist/escu}/default/macros.conf | 0 {package => dist/escu}/default/restmap.conf | 0 {package => dist/escu}/default/savedsearches.conf | 0 {package => dist/escu}/default/searchbnf.conf | 0 {package => dist/escu}/default/transforms.conf | 0 {package => dist/escu}/default/usage_searches.conf | 0 .../escu}/default/use_case_library.conf | 0 .../escu}/default/workflow_actions.conf | 0 .../escu}/lookups/aws_service_accounts.csv | 0 .../baseline_blocked_outbound_connections.csv | 0 {package => dist/escu}/lookups/brand_monitoring.csv | 0 {package => dist/escu}/lookups/csc_lookup.csv | 0 .../escu}/lookups/discovered_dns_records.csv | 0 {package => dist/escu}/lookups/domains.csv | 0 .../escu}/lookups/dynamic_dns_providers_default.csv | 0 .../escu}/lookups/dynamic_dns_providers_local.csv | 0 {package => dist/escu}/lookups/escu_search_id.csv | 0 .../lookups/is_suspicious_file_extension_lookup.csv | 0 .../escu}/lookups/is_windows_system_file.csv | 0 {package => dist/escu}/lookups/legit_domains.csv | 0 {package => dist/escu}/lookups/mitre_enrichment.csv | 0 .../escu}/lookups/network_acl_activity_baseline.csv | 0 .../previously_seen_S3_access_from_remote_ip.csv | 0 .../previously_seen_api_calls_from_user_roles.csv | 0 .../previously_seen_aws_cross_account_activity.csv | 0 .../escu}/lookups/previously_seen_aws_regions.csv | 0 .../lookups/previously_seen_cmd_line_arguments.csv | 0 .../previously_seen_ec2_modifications_by_user.csv | 0 .../escu}/lookups/prohibited_apps_launching_cmd.csv | 0 .../escu}/lookups/prohibited_processes.csv | 0 .../escu}/lookups/prohibited_softwares.csv | 0 .../escu}/lookups/ransomware_extensions.csv | 0 {package => dist/escu}/lookups/ransomware_notes.csv | 0 .../lookups/rare_process_allow_list_default.csv | 0 .../escu}/lookups/rare_process_allow_list_local.csv | 0 .../escu}/lookups/s3_deletion_baseline.csv | 0 .../lookups/security_group_activity_baseline.csv | 0 .../escu}/lookups/security_services.csv | 0 {package => dist/escu}/lookups/suspicious_files.csv | 0 .../escu}/lookups/uncommon_processes_default.csv | 0 .../escu}/lookups/uncommon_processes_local.csv | 0 {package => dist/escu}/metadata/default.meta | 0 {package => dist/escu}/static/appIcon.png | Bin {package => dist/escu}/static/appIconAlt.png | Bin {package => dist/escu}/static/appIconAlt_2x.png | Bin {package => dist/escu}/static/appIcon_2x.png | Bin 140 files changed, 0 insertions(+), 0 deletions(-) rename {package => dist/escu}/README.md (100%) rename {package => dist/escu}/README/essoc_story_detail.txt (100%) rename {package => dist/escu}/README/essoc_summary.txt (100%) rename {package => dist/escu}/README/essoc_usage_dashboard.txt (100%) rename {package => dist/escu}/app.manifest (100%) rename {package => dist/escu}/bin/dnstwist.py (100%) rename {package => dist/escu}/bin/escu_contextualize.py (100%) rename {package => dist/escu}/bin/escu_investigate.py (100%) rename {package => dist/escu}/bin/runstory.py (100%) rename {package => dist/escu}/bin/splunklib/__init__.py (100%) rename {package => dist/escu}/bin/splunklib/binding.py (100%) rename {package => dist/escu}/bin/splunklib/client.py (100%) rename {package => dist/escu}/bin/splunklib/data.py (100%) rename {package => dist/escu}/bin/splunklib/modularinput/__init__.py (100%) rename {package => dist/escu}/bin/splunklib/modularinput/argument.py (100%) rename {package => dist/escu}/bin/splunklib/modularinput/event.py (100%) rename {package => dist/escu}/bin/splunklib/modularinput/event_writer.py (100%) rename {package => dist/escu}/bin/splunklib/modularinput/input_definition.py (100%) rename {package => dist/escu}/bin/splunklib/modularinput/scheme.py (100%) rename {package => dist/escu}/bin/splunklib/modularinput/script.py (100%) rename {package => dist/escu}/bin/splunklib/modularinput/utils.py (100%) rename {package => dist/escu}/bin/splunklib/modularinput/validation_definition.py (100%) rename {package => dist/escu}/bin/splunklib/ordereddict.py (100%) rename {package => dist/escu}/bin/splunklib/results.py (100%) rename {package => dist/escu}/bin/splunklib/searchcommands/__init__.py (100%) rename {package => dist/escu}/bin/splunklib/searchcommands/decorators.py (100%) rename {package => dist/escu}/bin/splunklib/searchcommands/environment.py (100%) rename {package => dist/escu}/bin/splunklib/searchcommands/eventing_command.py (100%) rename {package => dist/escu}/bin/splunklib/searchcommands/external_search_command.py (100%) rename {package => dist/escu}/bin/splunklib/searchcommands/generating_command.py (100%) rename {package => dist/escu}/bin/splunklib/searchcommands/internals.py (100%) rename {package => dist/escu}/bin/splunklib/searchcommands/reporting_command.py (100%) rename {package => dist/escu}/bin/splunklib/searchcommands/search_command.py (100%) rename {package => dist/escu}/bin/splunklib/searchcommands/streaming_command.py (100%) rename {package => dist/escu}/bin/splunklib/searchcommands/validators.py (100%) rename {package => dist/escu}/default/analytic_stories.conf (100%) rename {package => dist/escu}/default/analyticstories.conf (100%) rename {package => dist/escu}/default/app.conf (100%) rename {package => dist/escu}/default/collections.conf (100%) rename {package => dist/escu}/default/commands.conf (100%) rename {package => dist/escu}/default/content-version.conf (100%) rename {package => dist/escu}/default/data/ui/nav/default.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_all_backup_logs_for_host___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_amazon_eks_kubernetes_activity_by_src_ip___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_aws_investigate_security_hub_alerts_by_dest___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_aws_investigate_user_activities_by_accesskeyid___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_aws_investigate_user_activities_by_arn___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_aws_network_acl_details_from_id___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_aws_network_interface_details_via_resourceid___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_aws_s3_bucket_details_via_bucketname___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_gcp_kubernetes_activity_by_src_ip___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_all_aws_activity_from_city___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_all_aws_activity_from_country___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_all_aws_activity_from_ip_address___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_all_aws_activity_from_region___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_backup_logs_for_endpoint___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_certificate_logs_for_a_domain___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_dns_server_history_for_a_host___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_dns_traffic_ratio___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_ec2_instance_details_by_instanceid___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_ec2_launch_details___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_email_info___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_emails_from_specific_sender___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_first_occurrence_and_last_occurrence_of_a_mac_address___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_history_of_email_sources___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_logon_rights_modifications_for_endpoint___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_logon_rights_modifications_for_user___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_notable_history___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_outbound_emails_to_hidden_cobra_threat_actors___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_parent_process_info___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_process_file_activity___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_process_info___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_process_information_for_port_activity___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_process_responsible_for_the_dns_traffic___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_sysmon_wmi_activity_for_host___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_get_web_session_information_via_session_id___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_investigate_aws_activities_via_region_name___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_investigate_aws_user_activities_by_user_field___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_investigate_failed_logins_for_multiple_destinations___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_investigate_network_traffic_from_src_ip___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_investigate_okta_activity_by_app___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_investigate_okta_activity_by_ip_address___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_investigate_pass_the_hash_attempts___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_investigate_pass_the_ticket_attempts___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_investigate_previous_unseen_user___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_investigate_successful_remote_desktop_authentications___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_investigate_suspicious_strings_in_http_header___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_investigate_user_activities_in_okta___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/panels/workbench_panel_investigate_web_posts_from_src___response_task.xml (100%) rename {package => dist/escu}/default/data/ui/views/escu_summary.xml (100%) rename {package => dist/escu}/default/data/ui/views/escu_usage.xml (100%) rename {package => dist/escu}/default/data/ui/views/feedback.xml (100%) rename {package => dist/escu}/default/distsearch.conf (100%) rename {package => dist/escu}/default/es_investigations.conf (100%) rename {package => dist/escu}/default/macros.conf (100%) rename {package => dist/escu}/default/restmap.conf (100%) rename {package => dist/escu}/default/savedsearches.conf (100%) rename {package => dist/escu}/default/searchbnf.conf (100%) rename {package => dist/escu}/default/transforms.conf (100%) rename {package => dist/escu}/default/usage_searches.conf (100%) rename {package => dist/escu}/default/use_case_library.conf (100%) rename {package => dist/escu}/default/workflow_actions.conf (100%) rename {package => dist/escu}/lookups/aws_service_accounts.csv (100%) rename {package => dist/escu}/lookups/baseline_blocked_outbound_connections.csv (100%) rename {package => dist/escu}/lookups/brand_monitoring.csv (100%) rename {package => dist/escu}/lookups/csc_lookup.csv (100%) rename {package => dist/escu}/lookups/discovered_dns_records.csv (100%) rename {package => dist/escu}/lookups/domains.csv (100%) rename {package => dist/escu}/lookups/dynamic_dns_providers_default.csv (100%) rename {package => dist/escu}/lookups/dynamic_dns_providers_local.csv (100%) rename {package => dist/escu}/lookups/escu_search_id.csv (100%) rename {package => dist/escu}/lookups/is_suspicious_file_extension_lookup.csv (100%) rename {package => dist/escu}/lookups/is_windows_system_file.csv (100%) rename {package => dist/escu}/lookups/legit_domains.csv (100%) rename {package => dist/escu}/lookups/mitre_enrichment.csv (100%) rename {package => dist/escu}/lookups/network_acl_activity_baseline.csv (100%) rename {package => dist/escu}/lookups/previously_seen_S3_access_from_remote_ip.csv (100%) rename {package => dist/escu}/lookups/previously_seen_api_calls_from_user_roles.csv (100%) rename {package => dist/escu}/lookups/previously_seen_aws_cross_account_activity.csv (100%) rename {package => dist/escu}/lookups/previously_seen_aws_regions.csv (100%) rename {package => dist/escu}/lookups/previously_seen_cmd_line_arguments.csv (100%) rename {package => dist/escu}/lookups/previously_seen_ec2_modifications_by_user.csv (100%) rename {package => dist/escu}/lookups/prohibited_apps_launching_cmd.csv (100%) rename {package => dist/escu}/lookups/prohibited_processes.csv (100%) rename {package => dist/escu}/lookups/prohibited_softwares.csv (100%) rename {package => dist/escu}/lookups/ransomware_extensions.csv (100%) rename {package => dist/escu}/lookups/ransomware_notes.csv (100%) rename {package => dist/escu}/lookups/rare_process_allow_list_default.csv (100%) rename {package => dist/escu}/lookups/rare_process_allow_list_local.csv (100%) rename {package => dist/escu}/lookups/s3_deletion_baseline.csv (100%) rename {package => dist/escu}/lookups/security_group_activity_baseline.csv (100%) rename {package => dist/escu}/lookups/security_services.csv (100%) rename {package => dist/escu}/lookups/suspicious_files.csv (100%) rename {package => dist/escu}/lookups/uncommon_processes_default.csv (100%) rename {package => dist/escu}/lookups/uncommon_processes_local.csv (100%) rename {package => dist/escu}/metadata/default.meta (100%) rename {package => dist/escu}/static/appIcon.png (100%) rename {package => dist/escu}/static/appIconAlt.png (100%) rename {package => dist/escu}/static/appIconAlt_2x.png (100%) rename {package => dist/escu}/static/appIcon_2x.png (100%) diff --git a/package/README.md b/dist/escu/README.md similarity index 100% rename from package/README.md rename to dist/escu/README.md diff --git a/package/README/essoc_story_detail.txt b/dist/escu/README/essoc_story_detail.txt similarity index 100% rename from package/README/essoc_story_detail.txt rename to dist/escu/README/essoc_story_detail.txt diff --git a/package/README/essoc_summary.txt b/dist/escu/README/essoc_summary.txt similarity index 100% rename from package/README/essoc_summary.txt rename to dist/escu/README/essoc_summary.txt diff --git a/package/README/essoc_usage_dashboard.txt b/dist/escu/README/essoc_usage_dashboard.txt similarity index 100% rename from package/README/essoc_usage_dashboard.txt rename to dist/escu/README/essoc_usage_dashboard.txt diff --git a/package/app.manifest b/dist/escu/app.manifest similarity index 100% rename from package/app.manifest rename to dist/escu/app.manifest diff --git a/package/bin/dnstwist.py b/dist/escu/bin/dnstwist.py similarity index 100% rename from package/bin/dnstwist.py rename to dist/escu/bin/dnstwist.py diff --git a/package/bin/escu_contextualize.py b/dist/escu/bin/escu_contextualize.py similarity index 100% rename from package/bin/escu_contextualize.py rename to dist/escu/bin/escu_contextualize.py diff --git a/package/bin/escu_investigate.py b/dist/escu/bin/escu_investigate.py similarity index 100% rename from package/bin/escu_investigate.py rename to dist/escu/bin/escu_investigate.py diff --git a/package/bin/runstory.py b/dist/escu/bin/runstory.py similarity index 100% rename from package/bin/runstory.py rename to dist/escu/bin/runstory.py diff --git a/package/bin/splunklib/__init__.py b/dist/escu/bin/splunklib/__init__.py similarity index 100% rename from package/bin/splunklib/__init__.py rename to dist/escu/bin/splunklib/__init__.py diff --git a/package/bin/splunklib/binding.py b/dist/escu/bin/splunklib/binding.py similarity index 100% rename from package/bin/splunklib/binding.py rename to dist/escu/bin/splunklib/binding.py diff --git a/package/bin/splunklib/client.py b/dist/escu/bin/splunklib/client.py similarity index 100% rename from package/bin/splunklib/client.py rename to dist/escu/bin/splunklib/client.py diff --git a/package/bin/splunklib/data.py b/dist/escu/bin/splunklib/data.py similarity index 100% rename from package/bin/splunklib/data.py rename to dist/escu/bin/splunklib/data.py diff --git a/package/bin/splunklib/modularinput/__init__.py b/dist/escu/bin/splunklib/modularinput/__init__.py similarity index 100% rename from package/bin/splunklib/modularinput/__init__.py rename to dist/escu/bin/splunklib/modularinput/__init__.py diff --git a/package/bin/splunklib/modularinput/argument.py b/dist/escu/bin/splunklib/modularinput/argument.py similarity index 100% rename from package/bin/splunklib/modularinput/argument.py rename to dist/escu/bin/splunklib/modularinput/argument.py diff --git a/package/bin/splunklib/modularinput/event.py b/dist/escu/bin/splunklib/modularinput/event.py similarity index 100% rename from package/bin/splunklib/modularinput/event.py rename to dist/escu/bin/splunklib/modularinput/event.py diff --git a/package/bin/splunklib/modularinput/event_writer.py b/dist/escu/bin/splunklib/modularinput/event_writer.py similarity index 100% rename from package/bin/splunklib/modularinput/event_writer.py rename to dist/escu/bin/splunklib/modularinput/event_writer.py diff --git a/package/bin/splunklib/modularinput/input_definition.py b/dist/escu/bin/splunklib/modularinput/input_definition.py similarity index 100% rename from package/bin/splunklib/modularinput/input_definition.py rename to dist/escu/bin/splunklib/modularinput/input_definition.py diff --git a/package/bin/splunklib/modularinput/scheme.py b/dist/escu/bin/splunklib/modularinput/scheme.py similarity index 100% rename from package/bin/splunklib/modularinput/scheme.py rename to dist/escu/bin/splunklib/modularinput/scheme.py diff --git a/package/bin/splunklib/modularinput/script.py b/dist/escu/bin/splunklib/modularinput/script.py similarity index 100% rename from package/bin/splunklib/modularinput/script.py rename to dist/escu/bin/splunklib/modularinput/script.py diff --git a/package/bin/splunklib/modularinput/utils.py b/dist/escu/bin/splunklib/modularinput/utils.py similarity index 100% rename from package/bin/splunklib/modularinput/utils.py rename to dist/escu/bin/splunklib/modularinput/utils.py diff --git a/package/bin/splunklib/modularinput/validation_definition.py b/dist/escu/bin/splunklib/modularinput/validation_definition.py similarity index 100% rename from package/bin/splunklib/modularinput/validation_definition.py rename to dist/escu/bin/splunklib/modularinput/validation_definition.py diff --git a/package/bin/splunklib/ordereddict.py b/dist/escu/bin/splunklib/ordereddict.py similarity index 100% rename from package/bin/splunklib/ordereddict.py rename to dist/escu/bin/splunklib/ordereddict.py diff --git a/package/bin/splunklib/results.py b/dist/escu/bin/splunklib/results.py similarity index 100% rename from package/bin/splunklib/results.py rename to dist/escu/bin/splunklib/results.py diff --git a/package/bin/splunklib/searchcommands/__init__.py b/dist/escu/bin/splunklib/searchcommands/__init__.py similarity index 100% rename from package/bin/splunklib/searchcommands/__init__.py rename to dist/escu/bin/splunklib/searchcommands/__init__.py diff --git a/package/bin/splunklib/searchcommands/decorators.py b/dist/escu/bin/splunklib/searchcommands/decorators.py similarity index 100% rename from package/bin/splunklib/searchcommands/decorators.py rename to dist/escu/bin/splunklib/searchcommands/decorators.py diff --git a/package/bin/splunklib/searchcommands/environment.py b/dist/escu/bin/splunklib/searchcommands/environment.py similarity index 100% rename from package/bin/splunklib/searchcommands/environment.py rename to dist/escu/bin/splunklib/searchcommands/environment.py diff --git a/package/bin/splunklib/searchcommands/eventing_command.py b/dist/escu/bin/splunklib/searchcommands/eventing_command.py similarity index 100% rename from package/bin/splunklib/searchcommands/eventing_command.py rename to dist/escu/bin/splunklib/searchcommands/eventing_command.py diff --git a/package/bin/splunklib/searchcommands/external_search_command.py b/dist/escu/bin/splunklib/searchcommands/external_search_command.py similarity index 100% rename from package/bin/splunklib/searchcommands/external_search_command.py rename to dist/escu/bin/splunklib/searchcommands/external_search_command.py diff --git a/package/bin/splunklib/searchcommands/generating_command.py b/dist/escu/bin/splunklib/searchcommands/generating_command.py similarity index 100% rename from package/bin/splunklib/searchcommands/generating_command.py rename to dist/escu/bin/splunklib/searchcommands/generating_command.py diff --git a/package/bin/splunklib/searchcommands/internals.py b/dist/escu/bin/splunklib/searchcommands/internals.py similarity index 100% rename from package/bin/splunklib/searchcommands/internals.py rename to dist/escu/bin/splunklib/searchcommands/internals.py diff --git a/package/bin/splunklib/searchcommands/reporting_command.py b/dist/escu/bin/splunklib/searchcommands/reporting_command.py similarity index 100% rename from package/bin/splunklib/searchcommands/reporting_command.py rename to dist/escu/bin/splunklib/searchcommands/reporting_command.py diff --git a/package/bin/splunklib/searchcommands/search_command.py b/dist/escu/bin/splunklib/searchcommands/search_command.py similarity index 100% rename from package/bin/splunklib/searchcommands/search_command.py rename to dist/escu/bin/splunklib/searchcommands/search_command.py diff --git a/package/bin/splunklib/searchcommands/streaming_command.py b/dist/escu/bin/splunklib/searchcommands/streaming_command.py similarity index 100% rename from package/bin/splunklib/searchcommands/streaming_command.py rename to dist/escu/bin/splunklib/searchcommands/streaming_command.py diff --git a/package/bin/splunklib/searchcommands/validators.py b/dist/escu/bin/splunklib/searchcommands/validators.py similarity index 100% rename from package/bin/splunklib/searchcommands/validators.py rename to dist/escu/bin/splunklib/searchcommands/validators.py diff --git a/package/default/analytic_stories.conf b/dist/escu/default/analytic_stories.conf similarity index 100% rename from package/default/analytic_stories.conf rename to dist/escu/default/analytic_stories.conf diff --git a/package/default/analyticstories.conf b/dist/escu/default/analyticstories.conf similarity index 100% rename from package/default/analyticstories.conf rename to dist/escu/default/analyticstories.conf diff --git a/package/default/app.conf b/dist/escu/default/app.conf similarity index 100% rename from package/default/app.conf rename to dist/escu/default/app.conf diff --git a/package/default/collections.conf b/dist/escu/default/collections.conf similarity index 100% rename from package/default/collections.conf rename to dist/escu/default/collections.conf diff --git a/package/default/commands.conf b/dist/escu/default/commands.conf similarity index 100% rename from package/default/commands.conf rename to dist/escu/default/commands.conf diff --git a/package/default/content-version.conf b/dist/escu/default/content-version.conf similarity index 100% rename from package/default/content-version.conf rename to dist/escu/default/content-version.conf diff --git a/package/default/data/ui/nav/default.xml b/dist/escu/default/data/ui/nav/default.xml similarity index 100% rename from package/default/data/ui/nav/default.xml rename to dist/escu/default/data/ui/nav/default.xml diff --git a/package/default/data/ui/panels/workbench_panel_all_backup_logs_for_host___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_all_backup_logs_for_host___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_all_backup_logs_for_host___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_all_backup_logs_for_host___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_amazon_eks_kubernetes_activity_by_src_ip___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_amazon_eks_kubernetes_activity_by_src_ip___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_amazon_eks_kubernetes_activity_by_src_ip___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_amazon_eks_kubernetes_activity_by_src_ip___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_aws_investigate_security_hub_alerts_by_dest___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_aws_investigate_security_hub_alerts_by_dest___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_aws_investigate_security_hub_alerts_by_dest___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_aws_investigate_security_hub_alerts_by_dest___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_aws_investigate_user_activities_by_accesskeyid___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_aws_investigate_user_activities_by_accesskeyid___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_aws_investigate_user_activities_by_accesskeyid___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_aws_investigate_user_activities_by_accesskeyid___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_aws_investigate_user_activities_by_arn___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_aws_investigate_user_activities_by_arn___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_aws_investigate_user_activities_by_arn___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_aws_investigate_user_activities_by_arn___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_aws_network_acl_details_from_id___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_aws_network_acl_details_from_id___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_aws_network_acl_details_from_id___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_aws_network_acl_details_from_id___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_aws_network_interface_details_via_resourceid___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_aws_network_interface_details_via_resourceid___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_aws_network_interface_details_via_resourceid___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_aws_network_interface_details_via_resourceid___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_aws_s3_bucket_details_via_bucketname___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_aws_s3_bucket_details_via_bucketname___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_aws_s3_bucket_details_via_bucketname___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_aws_s3_bucket_details_via_bucketname___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_gcp_kubernetes_activity_by_src_ip___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_gcp_kubernetes_activity_by_src_ip___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_gcp_kubernetes_activity_by_src_ip___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_gcp_kubernetes_activity_by_src_ip___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_all_aws_activity_from_city___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_all_aws_activity_from_city___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_all_aws_activity_from_city___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_all_aws_activity_from_city___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_all_aws_activity_from_country___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_all_aws_activity_from_country___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_all_aws_activity_from_country___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_all_aws_activity_from_country___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_all_aws_activity_from_ip_address___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_all_aws_activity_from_ip_address___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_all_aws_activity_from_ip_address___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_all_aws_activity_from_ip_address___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_all_aws_activity_from_region___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_all_aws_activity_from_region___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_all_aws_activity_from_region___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_all_aws_activity_from_region___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_backup_logs_for_endpoint___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_backup_logs_for_endpoint___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_backup_logs_for_endpoint___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_backup_logs_for_endpoint___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_certificate_logs_for_a_domain___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_certificate_logs_for_a_domain___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_certificate_logs_for_a_domain___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_certificate_logs_for_a_domain___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_dns_server_history_for_a_host___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_dns_server_history_for_a_host___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_dns_server_history_for_a_host___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_dns_server_history_for_a_host___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_dns_traffic_ratio___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_dns_traffic_ratio___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_dns_traffic_ratio___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_dns_traffic_ratio___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_ec2_instance_details_by_instanceid___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_ec2_instance_details_by_instanceid___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_ec2_instance_details_by_instanceid___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_ec2_instance_details_by_instanceid___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_ec2_launch_details___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_ec2_launch_details___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_ec2_launch_details___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_ec2_launch_details___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_email_info___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_email_info___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_email_info___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_email_info___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_emails_from_specific_sender___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_emails_from_specific_sender___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_emails_from_specific_sender___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_emails_from_specific_sender___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_first_occurrence_and_last_occurrence_of_a_mac_address___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_first_occurrence_and_last_occurrence_of_a_mac_address___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_first_occurrence_and_last_occurrence_of_a_mac_address___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_first_occurrence_and_last_occurrence_of_a_mac_address___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_history_of_email_sources___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_history_of_email_sources___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_history_of_email_sources___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_history_of_email_sources___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_logon_rights_modifications_for_endpoint___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_logon_rights_modifications_for_endpoint___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_logon_rights_modifications_for_endpoint___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_logon_rights_modifications_for_endpoint___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_logon_rights_modifications_for_user___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_logon_rights_modifications_for_user___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_logon_rights_modifications_for_user___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_logon_rights_modifications_for_user___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_notable_history___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_notable_history___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_notable_history___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_notable_history___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_outbound_emails_to_hidden_cobra_threat_actors___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_outbound_emails_to_hidden_cobra_threat_actors___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_outbound_emails_to_hidden_cobra_threat_actors___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_outbound_emails_to_hidden_cobra_threat_actors___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_parent_process_info___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_parent_process_info___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_parent_process_info___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_parent_process_info___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_process_file_activity___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_process_file_activity___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_process_file_activity___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_process_file_activity___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_process_info___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_process_info___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_process_info___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_process_info___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_process_information_for_port_activity___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_process_information_for_port_activity___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_process_information_for_port_activity___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_process_information_for_port_activity___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_process_responsible_for_the_dns_traffic___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_process_responsible_for_the_dns_traffic___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_process_responsible_for_the_dns_traffic___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_process_responsible_for_the_dns_traffic___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_sysmon_wmi_activity_for_host___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_sysmon_wmi_activity_for_host___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_sysmon_wmi_activity_for_host___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_sysmon_wmi_activity_for_host___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_get_web_session_information_via_session_id___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_get_web_session_information_via_session_id___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_get_web_session_information_via_session_id___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_get_web_session_information_via_session_id___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_investigate_aws_activities_via_region_name___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_investigate_aws_activities_via_region_name___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_investigate_aws_activities_via_region_name___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_investigate_aws_activities_via_region_name___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_investigate_aws_user_activities_by_user_field___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_investigate_aws_user_activities_by_user_field___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_investigate_aws_user_activities_by_user_field___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_investigate_aws_user_activities_by_user_field___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_investigate_failed_logins_for_multiple_destinations___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_investigate_failed_logins_for_multiple_destinations___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_investigate_failed_logins_for_multiple_destinations___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_investigate_failed_logins_for_multiple_destinations___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_investigate_network_traffic_from_src_ip___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_investigate_network_traffic_from_src_ip___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_investigate_network_traffic_from_src_ip___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_investigate_network_traffic_from_src_ip___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_investigate_okta_activity_by_app___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_investigate_okta_activity_by_app___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_investigate_okta_activity_by_app___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_investigate_okta_activity_by_app___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_investigate_okta_activity_by_ip_address___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_investigate_okta_activity_by_ip_address___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_investigate_okta_activity_by_ip_address___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_investigate_okta_activity_by_ip_address___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_investigate_pass_the_hash_attempts___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_investigate_pass_the_hash_attempts___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_investigate_pass_the_hash_attempts___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_investigate_pass_the_hash_attempts___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_investigate_pass_the_ticket_attempts___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_investigate_pass_the_ticket_attempts___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_investigate_pass_the_ticket_attempts___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_investigate_pass_the_ticket_attempts___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_investigate_previous_unseen_user___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_investigate_previous_unseen_user___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_investigate_previous_unseen_user___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_investigate_previous_unseen_user___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_investigate_successful_remote_desktop_authentications___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_investigate_successful_remote_desktop_authentications___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_investigate_successful_remote_desktop_authentications___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_investigate_successful_remote_desktop_authentications___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_investigate_suspicious_strings_in_http_header___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_investigate_suspicious_strings_in_http_header___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_investigate_suspicious_strings_in_http_header___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_investigate_suspicious_strings_in_http_header___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_investigate_user_activities_in_okta___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_investigate_user_activities_in_okta___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_investigate_user_activities_in_okta___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_investigate_user_activities_in_okta___response_task.xml diff --git a/package/default/data/ui/panels/workbench_panel_investigate_web_posts_from_src___response_task.xml b/dist/escu/default/data/ui/panels/workbench_panel_investigate_web_posts_from_src___response_task.xml similarity index 100% rename from package/default/data/ui/panels/workbench_panel_investigate_web_posts_from_src___response_task.xml rename to dist/escu/default/data/ui/panels/workbench_panel_investigate_web_posts_from_src___response_task.xml diff --git a/package/default/data/ui/views/escu_summary.xml b/dist/escu/default/data/ui/views/escu_summary.xml similarity index 100% rename from package/default/data/ui/views/escu_summary.xml rename to dist/escu/default/data/ui/views/escu_summary.xml diff --git a/package/default/data/ui/views/escu_usage.xml b/dist/escu/default/data/ui/views/escu_usage.xml similarity index 100% rename from package/default/data/ui/views/escu_usage.xml rename to dist/escu/default/data/ui/views/escu_usage.xml diff --git a/package/default/data/ui/views/feedback.xml b/dist/escu/default/data/ui/views/feedback.xml similarity index 100% rename from package/default/data/ui/views/feedback.xml rename to dist/escu/default/data/ui/views/feedback.xml diff --git a/package/default/distsearch.conf b/dist/escu/default/distsearch.conf similarity index 100% rename from package/default/distsearch.conf rename to dist/escu/default/distsearch.conf diff --git a/package/default/es_investigations.conf b/dist/escu/default/es_investigations.conf similarity index 100% rename from package/default/es_investigations.conf rename to dist/escu/default/es_investigations.conf diff --git a/package/default/macros.conf b/dist/escu/default/macros.conf similarity index 100% rename from package/default/macros.conf rename to dist/escu/default/macros.conf diff --git a/package/default/restmap.conf b/dist/escu/default/restmap.conf similarity index 100% rename from package/default/restmap.conf rename to dist/escu/default/restmap.conf diff --git a/package/default/savedsearches.conf b/dist/escu/default/savedsearches.conf similarity index 100% rename from package/default/savedsearches.conf rename to dist/escu/default/savedsearches.conf diff --git a/package/default/searchbnf.conf b/dist/escu/default/searchbnf.conf similarity index 100% rename from package/default/searchbnf.conf rename to dist/escu/default/searchbnf.conf diff --git a/package/default/transforms.conf b/dist/escu/default/transforms.conf similarity index 100% rename from package/default/transforms.conf rename to dist/escu/default/transforms.conf diff --git a/package/default/usage_searches.conf b/dist/escu/default/usage_searches.conf similarity index 100% rename from package/default/usage_searches.conf rename to dist/escu/default/usage_searches.conf diff --git a/package/default/use_case_library.conf b/dist/escu/default/use_case_library.conf similarity index 100% rename from package/default/use_case_library.conf rename to dist/escu/default/use_case_library.conf diff --git a/package/default/workflow_actions.conf b/dist/escu/default/workflow_actions.conf similarity index 100% rename from package/default/workflow_actions.conf rename to dist/escu/default/workflow_actions.conf diff --git a/package/lookups/aws_service_accounts.csv b/dist/escu/lookups/aws_service_accounts.csv similarity index 100% rename from package/lookups/aws_service_accounts.csv rename to dist/escu/lookups/aws_service_accounts.csv diff --git a/package/lookups/baseline_blocked_outbound_connections.csv b/dist/escu/lookups/baseline_blocked_outbound_connections.csv similarity index 100% rename from package/lookups/baseline_blocked_outbound_connections.csv rename to dist/escu/lookups/baseline_blocked_outbound_connections.csv diff --git a/package/lookups/brand_monitoring.csv b/dist/escu/lookups/brand_monitoring.csv similarity index 100% rename from package/lookups/brand_monitoring.csv rename to dist/escu/lookups/brand_monitoring.csv diff --git a/package/lookups/csc_lookup.csv b/dist/escu/lookups/csc_lookup.csv similarity index 100% rename from package/lookups/csc_lookup.csv rename to dist/escu/lookups/csc_lookup.csv diff --git a/package/lookups/discovered_dns_records.csv b/dist/escu/lookups/discovered_dns_records.csv similarity index 100% rename from package/lookups/discovered_dns_records.csv rename to dist/escu/lookups/discovered_dns_records.csv diff --git a/package/lookups/domains.csv b/dist/escu/lookups/domains.csv similarity index 100% rename from package/lookups/domains.csv rename to dist/escu/lookups/domains.csv diff --git a/package/lookups/dynamic_dns_providers_default.csv b/dist/escu/lookups/dynamic_dns_providers_default.csv similarity index 100% rename from package/lookups/dynamic_dns_providers_default.csv rename to dist/escu/lookups/dynamic_dns_providers_default.csv diff --git a/package/lookups/dynamic_dns_providers_local.csv b/dist/escu/lookups/dynamic_dns_providers_local.csv similarity index 100% rename from package/lookups/dynamic_dns_providers_local.csv rename to dist/escu/lookups/dynamic_dns_providers_local.csv diff --git a/package/lookups/escu_search_id.csv b/dist/escu/lookups/escu_search_id.csv similarity index 100% rename from package/lookups/escu_search_id.csv rename to dist/escu/lookups/escu_search_id.csv diff --git a/package/lookups/is_suspicious_file_extension_lookup.csv b/dist/escu/lookups/is_suspicious_file_extension_lookup.csv similarity index 100% rename from package/lookups/is_suspicious_file_extension_lookup.csv rename to dist/escu/lookups/is_suspicious_file_extension_lookup.csv diff --git a/package/lookups/is_windows_system_file.csv b/dist/escu/lookups/is_windows_system_file.csv similarity index 100% rename from package/lookups/is_windows_system_file.csv rename to dist/escu/lookups/is_windows_system_file.csv diff --git a/package/lookups/legit_domains.csv b/dist/escu/lookups/legit_domains.csv similarity index 100% rename from package/lookups/legit_domains.csv rename to dist/escu/lookups/legit_domains.csv diff --git a/package/lookups/mitre_enrichment.csv b/dist/escu/lookups/mitre_enrichment.csv similarity index 100% rename from package/lookups/mitre_enrichment.csv rename to dist/escu/lookups/mitre_enrichment.csv diff --git a/package/lookups/network_acl_activity_baseline.csv b/dist/escu/lookups/network_acl_activity_baseline.csv similarity index 100% rename from package/lookups/network_acl_activity_baseline.csv rename to dist/escu/lookups/network_acl_activity_baseline.csv diff --git a/package/lookups/previously_seen_S3_access_from_remote_ip.csv b/dist/escu/lookups/previously_seen_S3_access_from_remote_ip.csv similarity index 100% rename from package/lookups/previously_seen_S3_access_from_remote_ip.csv rename to dist/escu/lookups/previously_seen_S3_access_from_remote_ip.csv diff --git a/package/lookups/previously_seen_api_calls_from_user_roles.csv b/dist/escu/lookups/previously_seen_api_calls_from_user_roles.csv similarity index 100% rename from package/lookups/previously_seen_api_calls_from_user_roles.csv rename to dist/escu/lookups/previously_seen_api_calls_from_user_roles.csv diff --git a/package/lookups/previously_seen_aws_cross_account_activity.csv b/dist/escu/lookups/previously_seen_aws_cross_account_activity.csv similarity index 100% rename from package/lookups/previously_seen_aws_cross_account_activity.csv rename to dist/escu/lookups/previously_seen_aws_cross_account_activity.csv diff --git a/package/lookups/previously_seen_aws_regions.csv b/dist/escu/lookups/previously_seen_aws_regions.csv similarity index 100% rename from package/lookups/previously_seen_aws_regions.csv rename to dist/escu/lookups/previously_seen_aws_regions.csv diff --git a/package/lookups/previously_seen_cmd_line_arguments.csv b/dist/escu/lookups/previously_seen_cmd_line_arguments.csv similarity index 100% rename from package/lookups/previously_seen_cmd_line_arguments.csv rename to dist/escu/lookups/previously_seen_cmd_line_arguments.csv diff --git a/package/lookups/previously_seen_ec2_modifications_by_user.csv b/dist/escu/lookups/previously_seen_ec2_modifications_by_user.csv similarity index 100% rename from package/lookups/previously_seen_ec2_modifications_by_user.csv rename to dist/escu/lookups/previously_seen_ec2_modifications_by_user.csv diff --git a/package/lookups/prohibited_apps_launching_cmd.csv b/dist/escu/lookups/prohibited_apps_launching_cmd.csv similarity index 100% rename from package/lookups/prohibited_apps_launching_cmd.csv rename to dist/escu/lookups/prohibited_apps_launching_cmd.csv diff --git a/package/lookups/prohibited_processes.csv b/dist/escu/lookups/prohibited_processes.csv similarity index 100% rename from package/lookups/prohibited_processes.csv rename to dist/escu/lookups/prohibited_processes.csv diff --git a/package/lookups/prohibited_softwares.csv b/dist/escu/lookups/prohibited_softwares.csv similarity index 100% rename from package/lookups/prohibited_softwares.csv rename to dist/escu/lookups/prohibited_softwares.csv diff --git a/package/lookups/ransomware_extensions.csv b/dist/escu/lookups/ransomware_extensions.csv similarity index 100% rename from package/lookups/ransomware_extensions.csv rename to dist/escu/lookups/ransomware_extensions.csv diff --git a/package/lookups/ransomware_notes.csv b/dist/escu/lookups/ransomware_notes.csv similarity index 100% rename from package/lookups/ransomware_notes.csv rename to dist/escu/lookups/ransomware_notes.csv diff --git a/package/lookups/rare_process_allow_list_default.csv b/dist/escu/lookups/rare_process_allow_list_default.csv similarity index 100% rename from package/lookups/rare_process_allow_list_default.csv rename to dist/escu/lookups/rare_process_allow_list_default.csv diff --git a/package/lookups/rare_process_allow_list_local.csv b/dist/escu/lookups/rare_process_allow_list_local.csv similarity index 100% rename from package/lookups/rare_process_allow_list_local.csv rename to dist/escu/lookups/rare_process_allow_list_local.csv diff --git a/package/lookups/s3_deletion_baseline.csv b/dist/escu/lookups/s3_deletion_baseline.csv similarity index 100% rename from package/lookups/s3_deletion_baseline.csv rename to dist/escu/lookups/s3_deletion_baseline.csv diff --git a/package/lookups/security_group_activity_baseline.csv b/dist/escu/lookups/security_group_activity_baseline.csv similarity index 100% rename from package/lookups/security_group_activity_baseline.csv rename to dist/escu/lookups/security_group_activity_baseline.csv diff --git a/package/lookups/security_services.csv b/dist/escu/lookups/security_services.csv similarity index 100% rename from package/lookups/security_services.csv rename to dist/escu/lookups/security_services.csv diff --git a/package/lookups/suspicious_files.csv b/dist/escu/lookups/suspicious_files.csv similarity index 100% rename from package/lookups/suspicious_files.csv rename to dist/escu/lookups/suspicious_files.csv diff --git a/package/lookups/uncommon_processes_default.csv b/dist/escu/lookups/uncommon_processes_default.csv similarity index 100% rename from package/lookups/uncommon_processes_default.csv rename to dist/escu/lookups/uncommon_processes_default.csv diff --git a/package/lookups/uncommon_processes_local.csv b/dist/escu/lookups/uncommon_processes_local.csv similarity index 100% rename from package/lookups/uncommon_processes_local.csv rename to dist/escu/lookups/uncommon_processes_local.csv diff --git a/package/metadata/default.meta b/dist/escu/metadata/default.meta similarity index 100% rename from package/metadata/default.meta rename to dist/escu/metadata/default.meta diff --git a/package/static/appIcon.png b/dist/escu/static/appIcon.png similarity index 100% rename from package/static/appIcon.png rename to dist/escu/static/appIcon.png diff --git a/package/static/appIconAlt.png b/dist/escu/static/appIconAlt.png similarity index 100% rename from package/static/appIconAlt.png rename to dist/escu/static/appIconAlt.png diff --git a/package/static/appIconAlt_2x.png b/dist/escu/static/appIconAlt_2x.png similarity index 100% rename from package/static/appIconAlt_2x.png rename to dist/escu/static/appIconAlt_2x.png diff --git a/package/static/appIcon_2x.png b/dist/escu/static/appIcon_2x.png similarity index 100% rename from package/static/appIcon_2x.png rename to dist/escu/static/appIcon_2x.png