mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
Bhavin Patel
24 lines
1.1 KiB
YAML
24 lines
1.1 KiB
YAML
name: Windows Event Log System
|
|
id: 5f303f66-1947-49b8-8b26-f61c8de11cc3
|
|
author: Patrick Bareiss, Splunk
|
|
source: WinEventLog:System
|
|
sourcetype: WinEventLog
|
|
separator: EventCode
|
|
supported_TA:
|
|
name: Splunk Add-on for Microsoft Windows
|
|
version: 8.8.0
|
|
url: https://splunkbase.splunk.com/app/742
|
|
event_names:
|
|
- event_name: Windows Event Log System 104
|
|
data_source: data_sources/endpoint/event_sources/Windows_Event_Log_System_104.yml
|
|
- event_name: Windows Event Log System 4720
|
|
data_source: data_sources/endpoint/event_sources/Windows_Event_Log_System_4720.yml
|
|
- event_name: Windows Event Log System 4726
|
|
data_source: data_sources/endpoint/event_sources/Windows_Event_Log_System_4726.yml
|
|
- event_name: Windows Event Log System 7036
|
|
data_source: data_sources/endpoint/event_sources/Windows_Event_Log_System_7036.yml
|
|
- event_name: Windows Event Log System 7040
|
|
data_source: data_sources/endpoint/event_sources/Windows_Event_Log_System_7040.yml
|
|
- event_name: Windows Event Log System 7045
|
|
data_source: data_sources/endpoint/event_sources/Windows_Event_Log_System_7045.yml
|