splunk-security_content/macros/osquery_macro.yml at powershell_updates - splunk-security_content - Github MalDev Mirror

admin/splunk-security_content

mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00

Files

T

pyth0n1c 9bb3600558 Needed to change the name of the osquery macro due to a conflict with the newly introduced osquery data_source. Additionally, fixed a serious error in mapNamesToSecurityContentObjects wherein a Security Content Object of the wrong type could be returned.

2024-07-24 16:15:54 -07:00

4 lines

224 B

YAML

Raw Permalink Blame History

 definition: sourcetype=osquery:results
 description: customer specific splunk configurations(eg- index, source, sourcetype).
   Replace the macro definition with configurations for your Splunk Environmnent.
 name: osquery_macro