4 Commits

Author SHA1 Message Date
kbouchard b27f1889ac Delete response_templates/NIST80061_v2.json
Remove Unwanted Response Template that will cause customer confusion.  The plan out there will start with v3.
2026-04-21 08:11:45 -07:00
kbouchard fc1596e371 had to remove 8.5 from the name of response plans
had to remove 8.5 from the name of response plans
2026-04-01 20:55:54 -07:00
kbouchard 35e6ee2e97 Add files via upload (#3975)
Updated OOB Response Plan for 8.5 Release of Splunk Enterprise Security

Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
2026-03-28 10:07:40 +00:00
xqi-splunk 3953a43f05 Concept Shippable Response Plans (#3803)
* Create response_plan directory

* Update directory name

* Copy response_templates artifacts to dist/api

* Add response-templates schema validation workflow

* Add feature branch for testing purpose

* Update endpoint to playground

* Revert back debug changes

* Move scripts to workflows

* Remove manual check in

* Add sorting for version and template name

* Raise exception when file name not match

* Add indentation for json output

* Add debug option to dump json schema

* Generate merged templates at runtime

* Rename openAPI spec yaml to yml

* Move validation to build.yml

* Use stem to get file name

* Fix python package install

* Update version sorting using int

* Update openAPI spec for version

* Move build response templates to separate workflow

* Fix naming in build-response-templates.yml

* Update response templates to the ones for first release

* Fix naming of response templates

* Response templates to be added by response plan team

* Keep response_templates directory

* Skip .gitkeep checking when check non-json files

* Remove the .gitkeep

* Initial version of Response Templates

* Initial version of Response Templates

* Initial version of Response Templates

* Revert "Initial version of Response Templates"

This reverts commit 3a174dd02e.

* Revert "Initial version of Response Templates"

This reverts commit 26fa66ddde.

* Revert "Initial version of Response Templates"

This reverts commit 6014b4870b.

* Initial version of Response Templates

* Initial version of Response Templates

* Update and rename AccountCompromise_v14.json to AccountCompromise_v2.json

* Update and rename DataBreach_v15.json to DataBreach_v2.json

* Update and rename GenericIncidentResponse_v13.json to GenericIncidentResponse_v2.json

* Update and rename NIST80061_v14.json to NIST80061_v2.json

* Update and rename NetworkIndicatorEnrichment_v6.json to NetworkIndicatorEnrichment_v2.json

* Update and rename SelfReplicatingMalware_v14.json to SelfReplicatingMalware_v2.json

* Update and rename SuspiciousEmail_v35.json to SuspiciousEmail_v2.json

* Update and rename VulnerabilityDisclosure_v10.json to VulnerabilityDisclosure_v2.json

* Add comments

---------

Co-authored-by: pyth0n1c <87383215+pyth0n1c@users.noreply.github.com>
Co-authored-by: Christian Cloutier <ccloutier@splunk.com>
Co-authored-by: kbouchard <47464052+kbouchardherjavecgroup@users.noreply.github.com>
Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
2025-12-17 02:30:20 +05:30