admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix poorly formatted data_source sections

Browse Source
This commit is contained in:
pyth0n1c
2024-08-05 15:43:33 -07:00
parent 7a71b722b6
commit fa3d02449f
10 changed files with 10 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
data_sources/bro.yml
+1 -2
View File
@@ -6,5 +6,4 @@ author: Patrick Bareiss, Splunk
description: Data source object for Bro
source: bro:http:json
sourcetype: bro:http:json
supported_TA:
- {}
supported_TA: []
data_sources/crushftp.yml
+1 -2
View File
@@ -6,8 +6,7 @@ author: Patrick Bareiss, Splunk
description: Data source object for CrushFTP
source: crushftp
sourcetype: crushftp:sessionlogs
supported_TA:
- {}
supported_TA: []
fields:
- _time
- _raw
data_sources/kubernetes_audit.yml
+1 -2
View File
@@ -6,8 +6,7 @@ author: Patrick Bareiss, Splunk
description: Data source object for Kubernetes Audit
source: kubernetes
sourcetype: _json
supported_TA:
- {}
supported_TA: []
fields:
- _time
- annotations.authorization.k8s.io/decision
data_sources/kubernetes_falco.yml
+1 -2
View File
@@ -6,8 +6,7 @@ author: Patrick Bareiss, Splunk
description: Data source object for Kubernetes Falco
source: kubernetes
sourcetype: kube:container:falco
supported_TA:
- {}
supported_TA: []
fields:
- _time
- command
data_sources/linux_secure.yml
+1 -2
View File
@@ -6,8 +6,7 @@ author: Patrick Bareiss, Splunk
description: Data source object for Linux Secure
source: /var/log/secure
sourcetype: linux_secure
supported_TA:
- {}
supported_TA: []
fields:
- _time
- action
data_sources/nginx_access.yml
+1 -2
View File
@@ -6,8 +6,7 @@ author: Patrick Bareiss, Splunk
description: Data source object for Nginx Access
source: /var/log/nginx/access.log
sourcetype: nginx:plus:kv
supported_TA:
- {}
supported_TA: []
fields:
- _time
- action
data_sources/osquery.yml
+1 -2
View File
@@ -6,8 +6,7 @@ author: Patrick Bareiss, Splunk
description: Data source object for osquery
source: osquery
sourcetype: osquery:results
supported_TA:
- {}
supported_TA: []
fields:
- _time
- calendarTime
data_sources/powershell_installed_iis_modules.yml
+1 -2
View File
@@ -6,8 +6,7 @@ author: Patrick Bareiss, Splunk
description: Data source object for Powershell Installed IIS Modules
source: powershell://AppCmdModules
sourcetype: Pwsh:InstalledIISModules
supported_TA:
- {}
supported_TA: []
fields:
- _time
- Schema
data_sources/powershell_sip_inventory.yml
+1 -2
View File
@@ -6,5 +6,4 @@ author: Patrick Bareiss, Splunk
description: Data source object for Powershell SIP Inventory
source: powershell://SubjectInterfacePackage
sourcetype: PwSh:SubjectInterfacePackage
supported_TA:
- {}
supported_TA: []
data_sources/suricata.yml
+1 -2
View File
@@ -6,8 +6,7 @@ author: Patrick Bareiss, Splunk
description: Data source object for Suricata
source: suricata
sourcetype: suricata
supported_TA:
- {}
supported_TA: []
fields:
- _time
- app_proto