mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
13 lines
323 B
Django/Jinja
13 lines
323 B
Django/Jinja
name: {{name}}
|
|
tests:
|
|
- name: {{detection_name}}
|
|
file: {{detection_path}}
|
|
pass_condition: '{{pass_condition}}'
|
|
earliest_time: '{{earliest_time}}'
|
|
latest_time: '{{latest_time}}'
|
|
attack_data:
|
|
- file_name: {{file_name}}
|
|
data: {{dataset_url}}
|
|
source: {{splunk_source}}
|
|
sourcetype: {{splunk_sourcetype}}
|