mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
patel-bhavin
20 lines
448 B
YAML
20 lines
448 B
YAML
name: Azure Active Directory
|
|
id: 51ca21e5-bda2-4652-bb29-27c7bc18a81c
|
|
version: 1
|
|
date: '2024-07-18'
|
|
author: Patrick Bareiss, Splunk
|
|
description: All Azure Active Directory events
|
|
source: Azure AD
|
|
sourcetype: azure:monitor:aad
|
|
separator: operationName
|
|
supported_TA:
|
|
- name: Splunk Add-on for Microsoft Cloud Services
|
|
url: https://splunkbase.splunk.com/app/3110
|
|
version: 5.5.0
|
|
output_fields:
|
|
- dest
|
|
- user
|
|
- src
|
|
- vendor_account
|
|
- vendor_product
|