version_control_config: target_branch: develop infrastructure_config: infrastructure_type: container full_image_path: registry.hub.docker.com/splunk/splunk:latest post_test_behavior: pause_on_failure mode: changes detections_list: null splunkbase_username: null splunkbase_password: null apps: - uid: 6176 appid: Splunk_TA_linux_sysmon title: Add-on for Linux Sysmon description: null release: 1.0.4 local_path: null http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/add-on-for-linux-sysmon_104.tgz splunkbase_path: null environment_path: ENVIRONMENT_PATH_NOT_SET force_local: false # The Following TA does NOT exist on Splunkbase. It fixes a parsing issue that occurs when raw xmlwineventlog events # are replayed together at a HEC endpoint. This issue does not exist when logs are sent by a Universal Forwarder - uid: 9999 appid: Splunk_FIX_XMLWINEVENTLOG_HEC_PARSING title: Splunk Fix XmlWinEventLog HEC Parsing description: null release: 0.1 local_path: null http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/Splunk_TA_fix_windows.tgz splunkbase_path: null environment_path: ENVIRONMENT_PATH_NOT_SET force_local: false - uid: 742 appid: SPLUNK_ADD_ON_FOR_MICROSOFT_WINDOWS title: Splunk Add-on for Microsoft Windows description: null release: 8.8.0 local_path: null http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-microsoft-windows_880.tgz splunkbase_path: null environment_path: ENVIRONMENT_PATH_NOT_SET force_local: false - uid: 5709 appid: Splunk_TA_microsoft_sysmon title: Splunk Add-on for Sysmon description: null release: 3.1.0 local_path: null http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-sysmon_310.tgz splunkbase_path: null environment_path: ENVIRONMENT_PATH_NOT_SET force_local: false - uid: 833 appid: Splunk_TA_nix title: Splunk Add-on for Unix and Linux description: null release: 9.0.0 local_path: null http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-unix-and-linux_900.tgz splunkbase_path: null environment_path: ENVIRONMENT_PATH_NOT_SET force_local: false - uid: 5579 appid: Splunk_TA_CrowdStrike_FDR title: Splunk Add-on for CrowdStrike FDR description: null release: 1.4.0 local_path: null http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-crowdstrike-fdr_140.tgz splunkbase_path: null environment_path: ENVIRONMENT_PATH_NOT_SET force_local: false - uid: 3185 appid: SPLUNK_TA_FOR_IIS title: Splunk Add-on for Microsoft IIS description: null release: 1.2.0 local_path: null http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-microsoft-iis_120.tgz splunkbase_path: null environment_path: ENVIRONMENT_PATH_NOT_SET force_local: false - uid: 4242 appid: SPLUNK_TA_FOR_SURICATA title: TA for Suricata description: null release: 2.3.4 local_path: null http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/ta-for-suricata_234.tgz splunkbase_path: null environment_path: ENVIRONMENT_PATH_NOT_SET force_local: false - uid: 5466 appid: SPLUNK_TA_FOR_ZEEK title: TA for Zeek description: null release: 1.0.5 local_path: null http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/ta-for-zeek_105.tgz splunkbase_path: null environment_path: ENVIRONMENT_PATH_NOT_SET force_local: false - uid: 3258 appid: SPLUNK_ADD_ON_FOR_NGINX title: Splunk Add-on for NGINX description: null release: 3.2.1 local_path: null http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-nginx_321.tgz splunkbase_path: null environment_path: ENVIRONMENT_PATH_NOT_SET force_local: false - uid: 5238 appid: SPLUNK_ADD_ON_FOR_STREAM_FORWARDERS title: Splunk Add-on for Stream Forwarders description: null release: 8.1.1 local_path: null http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-stream-forwarders_811.tgz splunkbase_path: null environment_path: ENVIRONMENT_PATH_NOT_SET force_local: false - uid: 5234 appid: SPLUNK_ADD_ON_FOR_STREAM_WIRE_DATA title: Splunk Add-on for Stream Wire Data description: null release: 8.1.1 local_path: null http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-stream-wire-data_811.tgz splunkbase_path: null environment_path: ENVIRONMENT_PATH_NOT_SET force_local: false - uid: 2757 appid: PALO_ALTO_NETWORKS_ADD_ON_FOR_SPLUNK title: Palo Alto Networks Add-on for Splunk description: null release: 8.1.0 local_path: null http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/palo-alto-networks-add-on-for-splunk_810.tgz splunkbase_path: null environment_path: ENVIRONMENT_PATH_NOT_SET force_local: false - uid: 3865 appid: TA-Zscaler_CIM title: Zscaler Technical Add-On for Splunk description: null release: 4.0.3 local_path: null http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/zscaler-technical-add-on-for-splunk_403.tgz splunkbase_path: null environment_path: ENVIRONMENT_PATH_NOT_SET force_local: false - uid: 3719 appid: SPLUNK_ADD_ON_FOR_AMAZON_KINESIS_FIREHOSE title: Splunk Add-on for Amazon Kinesis Firehose description: null release: 1.3.2 local_path: null http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-amazon-kinesis-firehose_132.tgz splunkbase_path: null environment_path: ENVIRONMENT_PATH_NOT_SET force_local: false - uid: 1876 appid: Splunk_TA_aws title: Splunk Add-on for AWS description: null release: 7.2.0 local_path: null http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-amazon-web-services-aws_720.tgz splunkbase_path: null environment_path: ENVIRONMENT_PATH_NOT_SET force_local: false - uid: 3088 appid: SPLUNK_ADD_ON_FOR_GOOGLE_CLOUD_PLATFORM title: Splunk Add-on for Google Cloud Platform description: null release: 4.3.0 local_path: null http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-google-cloud-platform_430.tgz splunkbase_path: null environment_path: ENVIRONMENT_PATH_NOT_SET force_local: false - uid: 5556 appid: SPLUNK_ADD_ON_FOR_GOOGLE_WORKSPACE title: Splunk Add-on for Google Workspace description: null release: 2.6.0 local_path: null http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-google-workspace_260.tgz splunkbase_path: null environment_path: ENVIRONMENT_PATH_NOT_SET force_local: false - uid: 3110 appid: SPLUNK_TA_MICROSOFT_CLOUD_SERVICES title: Splunk Add-on for Microsoft Cloud Services description: null release: 5.2.1 local_path: null http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-microsoft-cloud-services_521.tgz splunkbase_path: null environment_path: ENVIRONMENT_PATH_NOT_SET force_local: false - uid: 4055 appid: SPLUNK_ADD_ON_FOR_MICROSOFT_OFFICE_365 title: Splunk Add-on for Microsoft Office 365 description: null release: 4.3.0 local_path: null http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-microsoft-office-365_430.tgz splunkbase_path: null environment_path: ENVIRONMENT_PATH_NOT_SET force_local: false - uid: 2890 appid: SPLUNK_MACHINE_LEARNING_TOOLKIT title: Splunk Machine Learning Toolkit description: null release: 5.4.1 local_path: null http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-machine-learning-toolkit_541.tgz splunkbase_path: null environment_path: ENVIRONMENT_PATH_NOT_SET force_local: false - uid: 2734 appid: URL_TOOLBOX title: URL Toolbox description: null release: 1.9.2 local_path: null http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/url-toolbox_192.tgz splunkbase_path: null environment_path: ENVIRONMENT_PATH_NOT_SET force_local: false - uid: 1621 appid: Splunk_SA_CIM title: Splunk Common Information Model (CIM) description: null release: 5.2.0 local_path: null http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-common-information-model-cim_520.tgz splunkbase_path: null environment_path: ENVIRONMENT_PATH_NOT_SET force_local: false