mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
Bhavin Patel
13 lines
447 B
YAML
13 lines
447 B
YAML
name: CrowdStrike
|
|
id: 1064b9f3-82cd-4e4f-ac1e-322ec54569a7
|
|
author: Patrick Bareiss, Splunk
|
|
source: crowdstrike
|
|
sourcetype: crowdstrike:events:sensor
|
|
separator: event_simpleName
|
|
supported_TA:
|
|
name: CrowdStrike Falcon Event Streams Technical Add-On
|
|
version: 3.2.1
|
|
url: https://splunkbase.splunk.com/app/5082
|
|
event_names:
|
|
- event_name: Crowdstrike ProcessRollup2
|
|
data_source: data_sources/endpoint/event_sources/Crowdstrike_ProcessRollup2.yml |