admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Branch was auto-updated.

Browse Source
This commit is contained in:
Bhavin Patel
2024-11-06 10:21:39 -08:00
committed by GitHub
parent 4a56691a16 793141ec9c
commit b2f2b8016b
24 changed files with 24 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files
data_sources/crowdstrike_processrollup2.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: event_simpleName
supported_TA:
- name: Splunk Add-on for CrowdStrike FDR
url: https://splunkbase.splunk.com/app/5579
version: 2.0.1
version: 2.0.2
fields:
- AuthenticationId
- AuthenticationId_meaning
data_sources/g_suite_drive.yml
+1 -1
View File
@@ -9,7 +9,7 @@ sourcetype: gsuite:drive:json
supported_TA:
- name: Splunk Add-on for Google Workspace
url: https://splunkbase.splunk.com/app/5556
version: 2.8.1
version: 3.0.0
fields:
- _time
- email
data_sources/g_suite_gmail.yml
+1 -1
View File
@@ -9,7 +9,7 @@ sourcetype: gsuite:gmail:bigquery
supported_TA:
- name: Splunk Add-on for Google Workspace
url: https://splunkbase.splunk.com/app/5556
version: 2.8.1
version: 3.0.0
fields:
- _time
- action_type
data_sources/google_workspace_login_failure.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: event.name
supported_TA:
- name: Splunk Add-on for Google Workspace
url: https://splunkbase.splunk.com/app/5556
version: 2.8.1
version: 3.0.0
fields:
- _time
- actor.email
data_sources/google_workspace_login_success.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: event.name
supported_TA:
- name: Splunk Add-on for Google Workspace
url: https://splunkbase.splunk.com/app/5556
version: 2.8.1
version: 3.0.0
fields:
- _time
- actor.email
data_sources/o365.yml
+1 -1
View File
@@ -10,4 +10,4 @@ separator: Operation
supported_TA:
- name: Splunk Add-on for Microsoft Office 365
url: https://splunkbase.splunk.com/app/4055
version: 4.5.2
version: 4.6.0
data_sources/o365_add_app_role_assignment_grant_to_user_.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: Operation
supported_TA:
- name: Splunk Add-on for Microsoft Office 365
url: https://splunkbase.splunk.com/app/4055
version: 4.5.2
version: 4.6.0
fields:
- _time
- ActorContextId
data_sources/o365_add_app_role_assignment_to_service_principal_.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: Operation
supported_TA:
- name: Splunk Add-on for Microsoft Office 365
url: https://splunkbase.splunk.com/app/4055
version: 4.5.2
version: 4.6.0
fields:
- _time
- ActorContextId
data_sources/o365_add_mailboxpermission.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: Operation
supported_TA:
- name: Splunk Add-on for Microsoft Office 365
url: https://splunkbase.splunk.com/app/4055
version: 4.5.2
version: 4.6.0
fields:
- _time
- AccessRights
data_sources/o365_add_member_to_role_.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: Operation
supported_TA:
- name: Splunk Add-on for Microsoft Office 365
url: https://splunkbase.splunk.com/app/4055
version: 4.5.2
version: 4.6.0
fields:
- _time
- ActorContextId
data_sources/o365_add_owner_to_application_.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: Operation
supported_TA:
- name: Splunk Add-on for Microsoft Office 365
url: https://splunkbase.splunk.com/app/4055
version: 4.5.2
version: 4.6.0
fields:
- _time
- ActorContextId
data_sources/o365_add_service_principal_.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: Operation
supported_TA:
- name: Splunk Add-on for Microsoft Office 365
url: https://splunkbase.splunk.com/app/4055
version: 4.5.2
version: 4.6.0
fields:
- _time
- ActorContextId
data_sources/o365_change_user_license_.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: Operation
supported_TA:
- name: Splunk Add-on for Microsoft Office 365
url: https://splunkbase.splunk.com/app/4055
version: 4.5.2
version: 4.6.0
fields:
- _time
- ActorContextId
data_sources/o365_consent_to_application_.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: Operation
supported_TA:
- name: Splunk Add-on for Microsoft Office 365
url: https://splunkbase.splunk.com/app/4055
version: 4.5.2
version: 4.6.0
fields:
- _time
- ActorContextId
data_sources/o365_disable_strong_authentication_.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: Operation
supported_TA:
- name: Splunk Add-on for Microsoft Office 365
url: https://splunkbase.splunk.com/app/4055
version: 4.5.2
version: 4.6.0
fields:
- _time
- ActorContextId
data_sources/o365_mailitemsaccessed.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: Operation
supported_TA:
- name: Splunk Add-on for Microsoft Office 365
url: https://splunkbase.splunk.com/app/4055
version: 4.5.2
version: 4.6.0
fields:
- _time
- AppId
data_sources/o365_modifyfolderpermissions.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: Operation
supported_TA:
- name: Splunk Add-on for Microsoft Office 365
url: https://splunkbase.splunk.com/app/4055
version: 4.5.2
version: 4.6.0
fields:
- _time
- AppId
data_sources/o365_set_company_information_.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: Operation
supported_TA:
- name: Splunk Add-on for Microsoft Office 365
url: https://splunkbase.splunk.com/app/4055
version: 4.5.2
version: 4.6.0
fields:
- _time
- ActorContextId
data_sources/o365_set_mailbox.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: Operation
supported_TA:
- name: Splunk Add-on for Microsoft Office 365
url: https://splunkbase.splunk.com/app/4055
version: 4.5.2
version: 4.6.0
fields:
- _time
- AppId
data_sources/o365_update_application_.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: Operation
supported_TA:
- name: Splunk Add-on for Microsoft Office 365
url: https://splunkbase.splunk.com/app/4055
version: 4.5.2
version: 4.6.0
fields:
- _time
- ActorContextId
data_sources/o365_update_authorization_policy_.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: Operation
supported_TA:
- name: Splunk Add-on for Microsoft Office 365
url: https://splunkbase.splunk.com/app/4055
version: 4.5.2
version: 4.6.0
fields:
- _time
- ActorContextId
data_sources/o365_update_user_.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: Operation
supported_TA:
- name: Splunk Add-on for Microsoft Office 365
url: https://splunkbase.splunk.com/app/4055
version: 4.5.2
version: 4.6.0
fields:
- _time
- ActorContextId
data_sources/o365_userloggedin.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: Operation
supported_TA:
- name: Splunk Add-on for Microsoft Office 365
url: https://splunkbase.splunk.com/app/4055
version: 4.5.2
version: 4.6.0
fields:
- _time
- ActorContextId
data_sources/o365_userloginfailed.yml
+1 -1
View File
@@ -10,7 +10,7 @@ separator: Operation
supported_TA:
- name: Splunk Add-on for Microsoft Office 365
url: https://splunkbase.splunk.com/app/4055
version: 4.5.2
version: 4.6.0
fields:
- _time
- ActorContextId