Files
splunk-security_content/deployments/00_default_baseline.yml
2022-12-01 14:34:23 +01:00

13 lines
339 B
YAML

name: ESCU Default Configuration Baseline
id: 0f7ee854-1aad-4bef-89c5-5c402b488510
date: '2021-12-21'
author: Patrick Bareiss
description: This configuration file applies to all detections of type baseline.
scheduling:
cron_schedule: 0 * * * *
earliest_time: -70m@m
latest_time: -10m@m
schedule_window: auto
tags:
type: Baseline