splunk-security_content

aws_cloudfront.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_assumerolewithsaml.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_consolelogin.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_copyobject.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_createaccesskey.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_createkey.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_createloginprofile.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_createnetworkaclentry.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_createpolicyversion.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_createsnapshot.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_createtask.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_createvirtualmfadevice.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deactivatemfadevice.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deleteaccountpasswordpolicy.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deletealarms.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deletedetector.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deletegroup.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deleteipset.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deleteloggroup.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deletelogstream.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deletenetworkaclentry.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deletepolicy.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deleterule.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deletesnapshot.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deletetrail.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deletevirtualmfadevice.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deletewebacl.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_describeeventaggregates.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_describeimagescanfindings.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_getaccountpasswordpolicy.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_getobject.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_getpassworddata.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_jobcreated.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_modifydbinstance.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_modifyimageattribute.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_modifysnapshotattribute.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_putbucketacl.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_putbucketlifecycle.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_putbucketreplication.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_putbucketversioning.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_putimage.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_putkeypolicy.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_replacenetworkaclentry.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_setdefaultpolicyversion.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_stoplogging.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_updateaccountpasswordpolicy.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_updateloginprofile.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_updatesamlprovider.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_updatetrail.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudwatchlogs_vpcflow.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_security_hub.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

azure_active_directory_add_app_role_assignment_to_service_principal.yml

Updated TAs

2024-09-12 06:57:49 +00:00

azure_active_directory_add_member_to_role.yml

Updated TAs

2024-09-12 06:57:49 +00:00

azure_active_directory_add_owner_to_application.yml

Updated TAs

2024-09-12 06:57:49 +00:00

azure_active_directory_add_service_principal.yml

Updated TAs

2024-09-12 06:57:49 +00:00

azure_active_directory_add_unverified_domain.yml

Updated TAs

2024-09-12 06:57:49 +00:00

azure_active_directory_consent_to_application.yml

Updated TAs

2024-09-12 06:57:49 +00:00

azure_active_directory_disable_strong_authentication.yml

Updated TAs

2024-09-12 06:57:49 +00:00

azure_active_directory_enable_account.yml

Updated TAs

2024-09-12 06:57:49 +00:00

azure_active_directory_invite_external_user.yml

Updated TAs

2024-09-12 06:57:49 +00:00

azure_active_directory_reset_password_(by_admin).yml

Updated TAs

2024-09-12 06:57:49 +00:00

azure_active_directory_set_domain_authentication.yml

Updated TAs

2024-09-12 06:57:49 +00:00

azure_active_directory_sign_in_activity.yml

Updated TAs

2024-09-12 06:57:49 +00:00

azure_active_directory_update_application.yml

Updated TAs

2024-09-12 06:57:49 +00:00

azure_active_directory_update_authorization_policy.yml

Updated TAs

2024-09-12 06:57:49 +00:00

azure_active_directory_update_user.yml

Updated TAs

2024-09-12 06:57:49 +00:00

azure_active_directory_user_registered_security_info.yml

Updated TAs

2024-09-12 06:57:49 +00:00

azure_active_directory.yml

Updated TAs

2024-09-12 06:57:49 +00:00

azure_audit_create_or_update_an_azure_automation_account.yml

Updated TAs

2024-09-12 06:57:49 +00:00

azure_audit_create_or_update_an_azure_automation_runbook.yml

Updated TAs

2024-09-12 06:57:49 +00:00

azure_audit_create_or_update_an_azure_automation_webhook.yml

Updated TAs

2024-09-12 06:57:49 +00:00

bro.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

circleci.yml

Better data source handling

2024-07-24 13:25:59 +02:00

crowdstrike_processrollup2.yml

Update crowdstrike ta

2024-08-05 16:42:40 -07:00

crushftp.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

g_suite_drive.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

g_suite_gmail.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

github.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

google_workspace_login_failure.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

google_workspace_login_success.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

ivanti_vtm_audit.yml

updating data source

2024-08-22 21:49:40 +05:30

kubernetes_audit.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

kubernetes_falco.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

linux_auditd_add_user.yml

auditd_data_source

2024-08-08 15:06:44 +02:00

linux_auditd_execve.yml

auditd_data_source

2024-08-08 15:00:58 +02:00

linux_auditd_path.yml

auditd_data_source

2024-08-08 15:00:58 +02:00

linux_auditd_proctitle.yml

auditd_data_source

2024-08-08 15:00:58 +02:00

linux_auditd_service_stop.yml

auditd_data_source

2024-08-08 15:06:44 +02:00

linux_auditd_syscall.yml

auditd_data_source

2024-08-08 15:00:58 +02:00

linux_secure.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

nginx_access.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

o365_add_app_role_assignment_grant_to_user_.yml

Better data source handling

2024-07-24 13:25:59 +02:00

o365_add_app_role_assignment_to_service_principal_.yml

Better data source handling

2024-07-24 13:25:59 +02:00

o365_add_mailboxpermission.yml

Better data source handling

2024-07-24 13:25:59 +02:00

o365_add_member_to_role_.yml

Better data source handling

2024-07-24 13:25:59 +02:00

o365_add_owner_to_application_.yml

Better data source handling

2024-07-24 13:25:59 +02:00

o365_add_service_principal_.yml

Better data source handling

2024-07-24 13:25:59 +02:00

o365_change_user_license_.yml

Better data source handling

2024-07-24 13:25:59 +02:00

o365_consent_to_application_.yml

Better data source handling

2024-07-24 13:25:59 +02:00

o365_disable_strong_authentication_.yml

Better data source handling

2024-07-24 13:25:59 +02:00

o365_mailitemsaccessed.yml

Better data source handling

2024-07-24 13:25:59 +02:00

o365_modifyfolderpermissions.yml

Better data source handling

2024-07-24 13:25:59 +02:00

o365_set_company_information_.yml

Better data source handling

2024-07-24 13:25:59 +02:00

o365_set_mailbox.yml

Better data source handling

2024-07-24 13:25:59 +02:00

o365_update_application_.yml

Better data source handling

2024-07-24 13:25:59 +02:00

o365_update_authorization_policy_.yml

Better data source handling

2024-07-24 13:25:59 +02:00

o365_update_user_.yml

Better data source handling

2024-07-24 13:25:59 +02:00

o365_userloggedin.yml

Better data source handling

2024-07-24 13:25:59 +02:00

o365_userloginfailed.yml

Better data source handling

2024-07-24 13:25:59 +02:00

o365.yml

Better data source handling

2024-07-24 13:25:59 +02:00

okta.yml

Updated TAs

2024-09-05 06:57:54 +00:00

osquery.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

palo_alto_network_threat.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

palo_alto_network_traffic.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

pingid.yml

Better data source handling

2024-07-24 13:25:59 +02:00

powershell_installed_iis_modules.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

powershell_script_block_logging_4104.yml

Data Source Bug Fix

2024-08-07 16:21:33 +02:00

powershell_sip_inventory.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

splunk_stream_http.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

splunk_stream_ip.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

splunk_stream_tcp.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

splunk.yml

Better data source handling

2024-07-24 13:25:59 +02:00

suricata.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

sysmon_eventid_1.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_3.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_5.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_6.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_7.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_8.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_9.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_10.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_11.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_12.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_13.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_15.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_17.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_18.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_20.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_21.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_22.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_23.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_for_linux_eventid_1.yml

Better data source handling

2024-07-24 13:25:59 +02:00

sysmon_for_linux_eventid_11.yml

Better data source handling

2024-07-24 13:25:59 +02:00

windows_active_directory_admon.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_application_2282.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_application_3000.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_capi2_70.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_capi2_81.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_certificateservicesclient_1007.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_defender_1121.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_defender_1122.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_defender_1129.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_defender_5007.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_printservice_316.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_printservice_808.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_remoteconnectionmanager_1149.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_1100.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_1102.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4624.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4625.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4627.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4648.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4662.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4663.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4672.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4688.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4698.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4699.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4703.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4719.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4720.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4724.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4725.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4726.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4732.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4738.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4739.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4741.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4742.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4768.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4769.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4771.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4776.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4781.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4794.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4798.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4876.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4886.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4887.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_5136.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_5137.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_5140.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_5141.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_5145.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_system_4720.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_system_4726.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_system_4728.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_system_7036.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_system_7040.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_system_7045.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_taskscheduler_200.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_iis_29.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_iis.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00