mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
David Dorsey
8438bf71e8
with the latest Windows TA. Simplified it by adding an hourly baseline cache update Made the default deployment template be -70m@m to -10m@m Added a new deployment template for hourly baseline caches
4 lines
166 B
YAML
4 lines
166 B
YAML
description: Use this macro to determine how far back you should be checking for new Windows services
|
|
definition: -70m@m
|
|
name: previously_seen_windows_service_window
|