admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Branch was auto-updated.

Browse Source
This commit is contained in:
srv-rr-gh-researchbt
2022-09-29 11:16:30 -07:00
committed by GitHub
parent 204783a7cf d0749350a5
commit fd556e9063
2 changed files with 17 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bin/contentctl_project/contentctl_core/application/factory/utils/new_content_questions.py
+12
View File
@@ -245,6 +245,18 @@ class NewContentQuestions():
{
'name': 'sysmon_linux.log'
},
{
'name': 'xml-windows-security.log'
},
{
'name': 'xml-windows-system.log'
},
{
'name': 'xml-windows-application.log'
},
{
'name': 'xml-windows-directory-service.log'
},
],
},
{
bin/contentctl_project/contentctl_infrastructure/adapter/obj_to_attackdata_yml_adapter.py
+5 -1
View File
@@ -26,7 +26,11 @@ class ObjToAttackDataYmlAdapter(Adapter):
'github.json' : 'aws:firehose:json',
'kubernetes_nginx.json' :'kube:container:controller',
'circleci.json' :'circleci',
'sysmon_linux.log' :'Syslog:Linux-Sysmon/Operational'
'sysmon_linux.log' :'Syslog:Linux-Sysmon/Operational',
'xml-windows-security.log': 'XmlWinEventLog:Security',
'xml-windows-system.log': 'XmlWinEventLog:System',
'xml-windows-application.log': 'XmlWinEventLog:Application',
'xml-windows-directory-service.log': 'XmlWinEventLog:Directory Service'
}
return