mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
Branch was auto-updated.
This commit is contained in:
+5
-1
@@ -17,4 +17,8 @@ Macros:
|
||||
|
||||
Lookups:
|
||||
- changed-files:
|
||||
- any-glob-to-any-file: lookups/*
|
||||
- any-glob-to-any-file: lookups/*
|
||||
|
||||
Datasource:
|
||||
- changed-files:
|
||||
- any-glob-to-any-file: data_sources/*
|
||||
|
||||
@@ -8,9 +8,9 @@ source: crowdstrike
|
||||
sourcetype: crowdstrike:events:sensor
|
||||
separator: event_simpleName
|
||||
supported_TA:
|
||||
- name: CrowdStrike Falcon Event Streams Technical Add-On
|
||||
url: https://splunkbase.splunk.com/app/5082
|
||||
version: 3.2.1
|
||||
- name: Splunk Add-on for CrowdStrike FDR
|
||||
url: https://splunkbase.splunk.com/app/5579
|
||||
version: 1.5.0
|
||||
fields:
|
||||
- AuthenticationId
|
||||
- AuthenticationId_meaning
|
||||
|
||||
Reference in New Issue
Block a user