mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
Eric McGinnis
21 lines
521 B
YAML
21 lines
521 B
YAML
name: Azure Active Directory
|
|
id: 51ca21e5-bda2-4652-bb29-27c7bc18a81c
|
|
version: 2
|
|
creation_date: '2024-05-22'
|
|
modification_date: '2026-05-13'
|
|
author: Patrick Bareiss, Splunk
|
|
description: All Azure Active Directory events
|
|
source: Azure AD
|
|
sourcetype: azure:monitor:aad
|
|
separator: operationName
|
|
supported_TA:
|
|
- name: Splunk Add-on for Microsoft Cloud Services
|
|
url: https://splunkbase.splunk.com/app/3110
|
|
version: 6.1.1
|
|
output_fields:
|
|
- dest
|
|
- user
|
|
- src
|
|
- vendor_account
|
|
- vendor_product
|