Files
splunk-security_content/lookups/remote_access_software_exceptions.yml

16 lines
368 B
YAML

name: remote_access_software_exceptions
date: 2024-12-23
version: 2
id: 2742e885-0706-494b-8f56-a90a3e8d33b4
author: Splunk Threat Research Team
lookup_type: kvstore
description: A list used to provide global exceptions to remote access monitoring content.
fields:
- _key
- asset
- software
- exception_date
- exception_ttl_days
- exception
- comment