Raven Tait 0bf8742bb4 Additional copy fail detections

2026-05-12 10:59:35 -04:00

..

asl_aws_cloudtrail.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudfront.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_assumerolewithsaml.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_consolelogin.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_copyobject.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_createaccesskey.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_createkey.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_createloginprofile.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_createnetworkaclentry.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_createpolicyversion.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_createsnapshot.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_createtask.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_createvirtualmfadevice.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_deactivatemfadevice.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_deleteaccountpasswordpolicy.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_deletealarms.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_deletedetector.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_deletegroup.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_deleteguardrail.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_deleteipset.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_deleteknowledgebase.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_deleteloggingconfiguration.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_deleteloggroup.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_deletelogstream.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_deletemodelinvocationloggingconfiguration.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_deletenetworkaclentry.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_deletepolicy.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_deleterule.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_deleterulegroup.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_deletesnapshot.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_deletetrail.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_deletevirtualmfadevice.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_deletewebacl.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_describeeventaggregates.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_describeimagescanfindings.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_describesnapshotattribute.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_getaccountpasswordpolicy.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_getobject.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_getpassworddata.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_invokemodel.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_jobcreated.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_listfoundationmodels.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_modifydbinstance.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_modifyimageattribute.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_modifysnapshotattribute.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_putbucketacl.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_putbucketlifecycle.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_putbucketreplication.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_putbucketversioning.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_putimage.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_putkeypolicy.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_replacenetworkaclentry.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_setdefaultpolicyversion.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_stoplogging.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_updateaccountpasswordpolicy.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_updateloginprofile.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_updatesamlprovider.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail_updatetrail.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudtrail.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_cloudwatchlogs_vpcflow.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

aws_security_hub.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

azure_active_directory_add_app_role_assignment_to_service_principal.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

azure_active_directory_add_member_to_role.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

azure_active_directory_add_owner_to_application.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

azure_active_directory_add_service_principal.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

azure_active_directory_add_unverified_domain.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

azure_active_directory_consent_to_application.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

azure_active_directory_disable_strong_authentication.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

azure_active_directory_enable_account.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

azure_active_directory_invite_external_user.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

azure_active_directory_microsoftgraphactivitylogs.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

azure_active_directory_noninteractiveusersigninlogs.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

azure_active_directory_reset_password_(by_admin).yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

azure_active_directory_set_domain_authentication.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

azure_active_directory_sign_in_activity.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

azure_active_directory_update_application.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

azure_active_directory_update_authorization_policy.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

azure_active_directory_update_user.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

azure_active_directory_user_registered_security_info.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

azure_active_directory.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

azure_audit_create_or_update_an_azure_automation_account.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

azure_audit_create_or_update_an_azure_automation_runbook.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

azure_audit_create_or_update_an_azure_automation_webhook.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

azure_monitor_activity.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

bro_conn.yml

Updated TAs

2025-08-25 06:59:36 +00:00

bro_dns.yml

Updated TAs

2025-08-25 06:59:36 +00:00

bro_files.yml

Updated TAs

2025-08-25 06:59:36 +00:00

bro_http.yml

Updated TAs

2025-08-25 06:59:36 +00:00

bro_loaded_scripts.yml

Updated TAs

2025-08-25 06:59:36 +00:00

bro_ntp.yml

Updated TAs

2025-08-25 06:59:36 +00:00

bro_ocsp.yml

Updated TAs

2025-08-25 06:59:36 +00:00

bro_ssl.yml

Updated TAs

2025-08-25 06:59:36 +00:00

bro_weird.yml

Updated TAs

2025-08-25 06:59:36 +00:00

bro_x509.yml

Updated TAs

2025-08-25 06:59:36 +00:00

circleci.yml

Fix unintended spacing updates

2025-01-23 10:09:09 -07:00

cisco_ai_defense_alerts.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

cisco_asa_logs.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

cisco_duo_activity.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

cisco_duo_administrator.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

cisco_ios_logs.yml

Updated TAs

2025-09-29 06:59:13 +00:00

cisco_isovalent_process_connect.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

cisco_isovalent_process_exec.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

cisco_isovalent_process_kprobe.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

cisco_network_visibility_module_flow_data.yml

updating the app_name

2025-07-07 15:55:23 -07:00

cisco_network_visibility_module_osquery.yml

updating the app_name

2025-07-07 15:55:23 -07:00

cisco_sd_wan_ntce_1000001.yml

Add New Analytics - February Batch (#3886)

2026-03-03 18:31:37 +05:30

cisco_sd_wan_service_proxy_access_logs.yml

More SD-WAN Content (#3944)

2026-03-12 18:16:41 +05:30

cisco_secure_access_firewall.yml

Add Secure Access Firewall Detections (#3986)

2026-04-29 20:41:09 +02:00

cisco_secure_firewall_threat_defense_connection_event.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

cisco_secure_firewall_threat_defense_file_event.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

cisco_secure_firewall_threat_defense_intrusion_event.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

crowdstrike_falcon_stream_alert.yml

upodated SPL based on new raw events (#3898)

2026-02-10 12:59:45 +05:30

crowdstrike_processrollup2.yml

Updated TAs

2025-06-13 06:59:28 +00:00

crushftp.yml

Fix unintended spacing updates

2025-01-23 10:09:09 -07:00

g_suite_drive.yml

Updated TAs (#4033)

2026-04-28 11:25:21 +02:00

g_suite_gmail.yml

Updated TAs (#4033)

2026-04-28 11:25:21 +02:00

github_enterprise_audit_logs.yml

Updated TAs

2025-07-04 07:00:30 +00:00

github_organizations_audit_logs.yml

Updated TAs

2025-07-04 07:00:30 +00:00

github_webhooks.yml

Merge remote-tracking branch 'upstream/develop' into datasource_enrichment

2025-03-17 17:04:08 -07:00

google_workspace_login_failure.yml

Updated TAs (#4033)

2026-04-28 11:25:21 +02:00

google_workspace_login_success.yml

Updated TAs (#4033)

2026-04-28 11:25:21 +02:00

google_workspace.yml

Updated TAs (#4033)

2026-04-28 11:25:21 +02:00

ivanti_vtm_audit.yml

Fix unintended spacing updates

2025-01-23 10:09:09 -07:00

kubernetes_audit.yml

Merge branch 'develop' into datasource_enrichment

2025-02-18 15:57:15 -06:00

kubernetes_falco.yml

Fix unintended spacing updates

2025-01-23 10:09:09 -07:00

linux_auditd_add_user.yml

Updated TAs

2025-10-09 06:58:04 +00:00

linux_auditd_cwd.yml

add missing extension

2025-12-02 18:59:42 +01:00

linux_auditd_daemon_abort.yml

Updated TAs

2025-10-09 06:58:04 +00:00

linux_auditd_daemon_end.yml

Updated TAs

2025-10-09 06:58:04 +00:00

linux_auditd_daemon_start.yml

Updated TAs

2025-10-09 06:58:04 +00:00

linux_auditd_execve.yml

Updated TAs

2025-10-09 06:58:04 +00:00

linux_auditd_path.yml

Updated TAs

2025-10-09 06:58:04 +00:00

linux_auditd_proctitle.yml

Updated TAs

2025-10-09 06:58:04 +00:00

linux_auditd_service_stop.yml

Updated TAs

2025-10-09 06:58:04 +00:00

linux_auditd_syscall.yml

Updated TAs

2025-10-09 06:58:04 +00:00

linux_messages_syslog.yml

Additional copy fail detections

2026-05-12 10:59:35 -04:00

linux_secure.yml

Updated TAs

2025-10-09 06:58:04 +00:00

m365_copilot_graph_api.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

m365_exported_ediscovery_prompts.yml

Ollama TA (#3757)

2025-11-05 09:50:50 -08:00

mcp_server.yml

Add New MCP Related Detections (#3895)

2026-02-17 23:39:01 +01:00

ms365_defender_incident_alerts.yml

Updated TAs (#3782)

2025-11-13 12:31:49 -08:00

ms_defender_atp_alerts.yml

Updated TAs (#3782)

2025-11-13 12:31:49 -08:00

nginx_access.yml

Merge branch 'develop' into datasource_enrichment

2025-02-18 15:57:15 -06:00

ntlm_operational_8004.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

ntlm_operational_8005.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

ntlm_operational_8006.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

o365_add_app_role_assignment_grant_to_user_.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

o365_add_app_role_assignment_to_service_principal_.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

o365_add_mailboxpermission.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

o365_add_member_to_role_.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

o365_add_owner_to_application_.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

o365_add_service_principal_.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

o365_change_user_license_.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

o365_consent_to_application_.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

o365_disable_strong_authentication_.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

o365_mailitemsaccessed.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

o365_modifyfolderpermissions.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

o365_set_company_information_.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

o365_set_mailbox.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

o365_update_application_.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

o365_update_authorization_policy_.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

o365_update_user_.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

o365_userloggedin.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

o365_userloginfailed.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

o365.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

office_365_reporting_message_trace.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

office_365_universal_audit_log.yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

okta.yml

Automated Splunk TA Update 610 (#4029)

2026-04-24 08:36:18 +00:00

ollama_server.yml

Add New MCP Related Detections (#3895)

2026-02-17 23:39:01 +01:00

osquery_results.yml

updating osquery (#4013)

2026-04-15 12:39:38 +02:00

palo_alto_network_threat.yml

Palo Alto Ta 3.0.0 was pulled from Splukbase. (#3985)

2026-03-31 22:42:26 +05:30

palo_alto_network_traffic.yml

Palo Alto Ta 3.0.0 was pulled from Splukbase. (#3985)

2026-03-31 22:42:26 +05:30

pingid.yml

Fix unintended spacing updates

2025-01-23 10:09:09 -07:00

powershell_installed_iis_modules.yml

Fix unintended spacing updates

2025-01-23 10:09:09 -07:00

powershell_script_block_logging_4104.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

powershell_sip_inventory.yml

Fix unintended spacing updates

2025-01-23 10:09:09 -07:00

splunk_appdynamics_secure_application_alert.yml

Updated TAs (#4055)

2026-05-02 13:04:05 +02:00

splunk_common_information_model_(cim).yml

Updated TAs (#4022)

2026-04-20 12:18:40 +02:00

splunk_stream_http.yml

Automated Splunk TA Update 560 (#3938)

2026-03-06 12:26:52 +05:30

splunk_stream_ip.yml

Automated Splunk TA Update 560 (#3938)

2026-03-06 12:26:52 +05:30

splunk_stream_tcp.yml

Automated Splunk TA Update 560 (#3938)

2026-03-06 12:26:52 +05:30

splunk.yml

Fix unintended spacing updates

2025-01-23 10:09:09 -07:00

suricata.yml

Update Suricata TA and Related Analytics (#3974)

2026-03-28 10:09:22 +00:00

sysmon_eventid_1.yml

Updated TAs

2025-08-07 07:02:29 +00:00

sysmon_eventid_3.yml

Updated TAs

2025-08-07 07:02:29 +00:00

sysmon_eventid_5.yml

Updated TAs

2025-08-07 07:02:29 +00:00

sysmon_eventid_6.yml

Updated TAs

2025-08-07 07:02:29 +00:00

sysmon_eventid_7.yml

Updated TAs

2025-08-07 07:02:29 +00:00

sysmon_eventid_8.yml

Updated TAs

2025-08-07 07:02:29 +00:00

sysmon_eventid_9.yml

Updated TAs

2025-08-07 07:02:29 +00:00

sysmon_eventid_10.yml

Updated TAs

2025-08-07 07:02:29 +00:00

sysmon_eventid_11.yml

Updated TAs

2025-08-07 07:02:29 +00:00

sysmon_eventid_12.yml

Updated TAs

2025-08-07 07:02:29 +00:00

sysmon_eventid_13.yml

Updated TAs

2025-08-07 07:02:29 +00:00

sysmon_eventid_14.yml

Updated TAs

2025-08-07 07:02:29 +00:00

sysmon_eventid_15.yml

Updated TAs

2025-08-07 07:02:29 +00:00

sysmon_eventid_17.yml

Updated TAs

2025-08-07 07:02:29 +00:00

sysmon_eventid_18.yml

Updated TAs

2025-08-07 07:02:29 +00:00

sysmon_eventid_20.yml

Updated TAs

2025-08-07 07:02:29 +00:00

sysmon_eventid_21.yml

Updated TAs

2025-08-07 07:02:29 +00:00

sysmon_eventid_22.yml

Updated TAs

2025-08-07 07:02:29 +00:00

sysmon_eventid_23.yml

Updated TAs

2025-08-07 07:02:29 +00:00

sysmon_eventid_26.yml

Updated TAs

2025-08-07 07:02:29 +00:00

sysmon_eventid_29.yml

netsupport (#3798)

2025-11-21 13:27:52 -08:00

sysmon_for_linux_eventid_1.yml

Merge branch 'develop' into output_normalization_endpoint

2025-03-19 15:10:33 +01:00

sysmon_for_linux_eventid_11.yml

Merge branch 'develop' into output_normalization_endpoint

2025-03-19 15:10:33 +01:00

vmware_esxi_syslog.yml

updating raw log (#3756)

2025-11-04 13:17:53 -08:00

windows_active_directory_admon.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_defender_alerts.yml

Updated TAs (#3858)

2026-01-10 14:20:32 +01:00

windows_event_log_application_2282.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_application_3000.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_application_8128.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_application_15457.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_application_17135.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_appxdeployment_server_400.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_appxdeployment_server_854.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_appxdeployment_server_855.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_appxpackaging_171.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_capi2_70.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_capi2_81.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_certificateservicesclient_1007.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_defender_1121.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_defender_1122.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_defender_1125.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_defender_1126.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_defender_1129.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_defender_1131.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_defender_1132.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_defender_1133.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_defender_1134.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_defender_5007.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_microsoft_windows_terminalservices_rdpclient_1024.yml

Fix unintended spacing updates

2025-01-23 10:09:09 -07:00

windows_event_log_printservice_316.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_printservice_808.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_printservice_4909.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_remoteconnectionmanager_1149.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_1100.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_1102.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4624.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4625.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4627.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4648.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4662.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4663.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4672.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4688.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4698.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4699.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4700.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4702.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4703.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4719.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4720.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4724.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4725.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4726.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4727.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4728.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4730.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4731.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4732.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4737.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4738.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4739.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4741.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4742.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4744.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4749.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4754.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4756.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4759.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4768.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4769.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4771.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4776.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4781.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4783.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4790.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4794.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4798.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4876.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4886.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4887.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4946.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4947.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_4948.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_5136.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_5137.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_5140.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_5141.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_security_5145.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_system_104.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_system_4720.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_system_4726.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_system_4728.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_system_7036.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_system_7040.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_system_7045.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_taskscheduler_200.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_event_log_taskscheduler_201.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_iis_29.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

windows_iis.yml

Updated TAs (#4026)

2026-04-23 10:16:37 +05:30

zeek_conn.yml

Updated TAs

2025-08-25 06:59:36 +00:00