admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
27aeb7d95d2ccc5078ee6345ec3666724682cc83
splunk-security_content/data_sources
T
History
Nasreddine Bencherchali ed5884f607 More SD-WAN Content (#3944) 
* add more sd-wan content

* rename macro

* Update cisco_sd_wan_service_proxy_access.yml

* fix parsing

* Update cisco_sd_wan___arbitrary_file_overwrite_exploitation_activity.yml

* apply review suggestions
2026-03-12 18:16:41 +05:30
..
asl_aws_cloudtrail.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudfront.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_assumerolewithsaml.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_consolelogin.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_copyobject.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_createaccesskey.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_createkey.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_createloginprofile.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_createnetworkaclentry.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_createpolicyversion.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_createsnapshot.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_createtask.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_createvirtualmfadevice.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_deactivatemfadevice.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_deleteaccountpasswordpolicy.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_deletealarms.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_deletedetector.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_deletegroup.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_deleteguardrail.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_deleteipset.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_deleteknowledgebase.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_deleteloggingconfiguration.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_deleteloggroup.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_deletelogstream.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_deletemodelinvocationloggingconfiguration.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_deletenetworkaclentry.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_deletepolicy.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_deleterule.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_deleterulegroup.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_deletesnapshot.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_deletetrail.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_deletevirtualmfadevice.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_deletewebacl.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_describeeventaggregates.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_describeimagescanfindings.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_describesnapshotattribute.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_getaccountpasswordpolicy.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_getobject.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_getpassworddata.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_invokemodel.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_jobcreated.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_listfoundationmodels.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_modifydbinstance.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_modifyimageattribute.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_modifysnapshotattribute.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_putbucketacl.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_putbucketlifecycle.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_putbucketreplication.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_putbucketversioning.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_putimage.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_putkeypolicy.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_replacenetworkaclentry.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_setdefaultpolicyversion.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_stoplogging.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_updateaccountpasswordpolicy.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_updateloginprofile.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_updatesamlprovider.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail_updatetrail.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudtrail.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_cloudwatchlogs_vpcflow.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
aws_security_hub.yml
Updated TAs (#3849)
2025-12-21 19:20:09 +01:00
azure_active_directory_add_app_role_assignment_to_service_principal.yml
Updated TAs (#3884)
2026-01-31 19:40:56 +01:00
azure_active_directory_add_member_to_role.yml
Updated TAs (#3884)
2026-01-31 19:40:56 +01:00
azure_active_directory_add_owner_to_application.yml
Updated TAs (#3884)
2026-01-31 19:40:56 +01:00
azure_active_directory_add_service_principal.yml
Updated TAs (#3884)
2026-01-31 19:40:56 +01:00
azure_active_directory_add_unverified_domain.yml
Updated TAs (#3884)
2026-01-31 19:40:56 +01:00
azure_active_directory_consent_to_application.yml
Updated TAs (#3884)
2026-01-31 19:40:56 +01:00
azure_active_directory_disable_strong_authentication.yml
Updated TAs (#3884)
2026-01-31 19:40:56 +01:00
azure_active_directory_enable_account.yml
Updated TAs (#3884)
2026-01-31 19:40:56 +01:00
azure_active_directory_invite_external_user.yml
Updated TAs (#3884)
2026-01-31 19:40:56 +01:00
azure_active_directory_microsoftgraphactivitylogs.yml
Updated TAs (#3884)
2026-01-31 19:40:56 +01:00
azure_active_directory_noninteractiveusersigninlogs.yml
Updated TAs (#3884)
2026-01-31 19:40:56 +01:00
azure_active_directory_reset_password_(by_admin).yml
Updated TAs (#3884)
2026-01-31 19:40:56 +01:00
azure_active_directory_set_domain_authentication.yml
Updated TAs (#3884)
2026-01-31 19:40:56 +01:00
azure_active_directory_sign_in_activity.yml
Updated TAs (#3884)
2026-01-31 19:40:56 +01:00
azure_active_directory_update_application.yml
Updated TAs (#3884)
2026-01-31 19:40:56 +01:00
azure_active_directory_update_authorization_policy.yml
Updated TAs (#3884)
2026-01-31 19:40:56 +01:00
azure_active_directory_update_user.yml
Updated TAs (#3884)
2026-01-31 19:40:56 +01:00
azure_active_directory_user_registered_security_info.yml
Updated TAs (#3884)
2026-01-31 19:40:56 +01:00
azure_active_directory.yml
Updated TAs (#3884)
2026-01-31 19:40:56 +01:00
azure_audit_create_or_update_an_azure_automation_account.yml
Updated TAs (#3884)
2026-01-31 19:40:56 +01:00
azure_audit_create_or_update_an_azure_automation_runbook.yml
Updated TAs (#3884)
2026-01-31 19:40:56 +01:00
azure_audit_create_or_update_an_azure_automation_webhook.yml
Updated TAs (#3884)
2026-01-31 19:40:56 +01:00
azure_monitor_activity.yml
Updated TAs (#3884)
2026-01-31 19:40:56 +01:00
bro_conn.yml
Updated TAs
2025-08-25 06:59:36 +00:00
bro_dns.yml
Updated TAs
2025-08-25 06:59:36 +00:00
bro_files.yml
Updated TAs
2025-08-25 06:59:36 +00:00
bro_http.yml
Updated TAs
2025-08-25 06:59:36 +00:00
bro_loaded_scripts.yml
Updated TAs
2025-08-25 06:59:36 +00:00
bro_ntp.yml
Updated TAs
2025-08-25 06:59:36 +00:00
bro_ocsp.yml
Updated TAs
2025-08-25 06:59:36 +00:00
bro_ssl.yml
Updated TAs
2025-08-25 06:59:36 +00:00
bro_weird.yml
Updated TAs
2025-08-25 06:59:36 +00:00
bro_x509.yml
Updated TAs
2025-08-25 06:59:36 +00:00
circleci.yml
Fix unintended spacing updates
2025-01-23 10:09:09 -07:00
cisco_ai_defense_alerts.yml
Updated TAs (#3918)
2026-02-24 22:18:56 +05:30
cisco_asa_logs.yml
Updated TAs (#3918)
2026-02-24 22:18:56 +05:30
cisco_duo_activity.yml
Updated TAs (#3918)
2026-02-24 22:18:56 +05:30
cisco_duo_administrator.yml
Updated TAs (#3918)
2026-02-24 22:18:56 +05:30
cisco_ios_logs.yml
Updated TAs
2025-09-29 06:59:13 +00:00
cisco_isovalent_process_connect.yml
Updated TAs (#3918)
2026-02-24 22:18:56 +05:30
cisco_isovalent_process_exec.yml
Updated TAs (#3918)
2026-02-24 22:18:56 +05:30
cisco_isovalent_process_kprobe.yml
Updated TAs (#3918)
2026-02-24 22:18:56 +05:30
cisco_network_visibility_module_flow_data.yml
updating the app_name
2025-07-07 15:55:23 -07:00
cisco_network_visibility_module_osquery.yml
updating the app_name
2025-07-07 15:55:23 -07:00
cisco_sd_wan_ntce_1000001.yml
Add New Analytics - February Batch (#3886)
2026-03-03 18:31:37 +05:30
cisco_sd_wan_service_proxy_access_logs.yml
More SD-WAN Content (#3944)
2026-03-12 18:16:41 +05:30
cisco_secure_firewall_threat_defense_connection_event.yml
Updated TAs (#3918)
2026-02-24 22:18:56 +05:30
cisco_secure_firewall_threat_defense_file_event.yml
Updated TAs (#3918)
2026-02-24 22:18:56 +05:30
cisco_secure_firewall_threat_defense_intrusion_event.yml
Updated TAs (#3918)
2026-02-24 22:18:56 +05:30
crowdstrike_falcon_stream_alert.yml
upodated SPL based on new raw events (#3898)
2026-02-10 12:59:45 +05:30
crowdstrike_processrollup2.yml
Updated TAs
2025-06-13 06:59:28 +00:00
crushftp.yml
Fix unintended spacing updates
2025-01-23 10:09:09 -07:00
g_suite_drive.yml
Updated TAs
2025-08-11 07:02:06 +00:00
g_suite_gmail.yml
Updated TAs
2025-08-11 07:02:06 +00:00
github_enterprise_audit_logs.yml
Updated TAs
2025-07-04 07:00:30 +00:00
github_organizations_audit_logs.yml
Updated TAs
2025-07-04 07:00:30 +00:00
github_webhooks.yml
Merge remote-tracking branch 'upstream/develop' into datasource_enrichment
2025-03-17 17:04:08 -07:00
google_workspace_login_failure.yml
Updated TAs
2025-08-11 07:02:06 +00:00
google_workspace_login_success.yml
Updated TAs
2025-08-11 07:02:06 +00:00
google_workspace.yml
Updated TAs
2025-08-11 07:02:06 +00:00
ivanti_vtm_audit.yml
Fix unintended spacing updates
2025-01-23 10:09:09 -07:00
kubernetes_audit.yml
Merge branch 'develop' into datasource_enrichment
2025-02-18 15:57:15 -06:00
kubernetes_falco.yml
Fix unintended spacing updates
2025-01-23 10:09:09 -07:00
linux_auditd_add_user.yml
Updated TAs
2025-10-09 06:58:04 +00:00
linux_auditd_cwd.yml
add missing extension
2025-12-02 18:59:42 +01:00
linux_auditd_daemon_abort.yml
Updated TAs
2025-10-09 06:58:04 +00:00
linux_auditd_daemon_end.yml
Updated TAs
2025-10-09 06:58:04 +00:00
linux_auditd_daemon_start.yml
Updated TAs
2025-10-09 06:58:04 +00:00
linux_auditd_execve.yml
Updated TAs
2025-10-09 06:58:04 +00:00
linux_auditd_path.yml
Updated TAs
2025-10-09 06:58:04 +00:00
linux_auditd_proctitle.yml
Updated TAs
2025-10-09 06:58:04 +00:00
linux_auditd_service_stop.yml
Updated TAs
2025-10-09 06:58:04 +00:00
linux_auditd_syscall.yml
Updated TAs
2025-10-09 06:58:04 +00:00
linux_secure.yml
Updated TAs
2025-10-09 06:58:04 +00:00
m365_copilot_graph_api.yml
Updated TAs (#3826)
2025-12-09 12:06:36 +01:00
m365_exported_ediscovery_prompts.yml
Ollama TA (#3757)
2025-11-05 09:50:50 -08:00
mcp_server.yml
Add New MCP Related Detections (#3895)
2026-02-17 23:39:01 +01:00
ms365_defender_incident_alerts.yml
Updated TAs (#3782)
2025-11-13 12:31:49 -08:00
ms_defender_atp_alerts.yml
Updated TAs (#3782)
2025-11-13 12:31:49 -08:00
nginx_access.yml
Merge branch 'develop' into datasource_enrichment
2025-02-18 15:57:15 -06:00
ntlm_operational_8004.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
ntlm_operational_8005.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
ntlm_operational_8006.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
o365_add_app_role_assignment_grant_to_user_.yml
Updated TAs (#3826)
2025-12-09 12:06:36 +01:00
o365_add_app_role_assignment_to_service_principal_.yml
Updated TAs (#3826)
2025-12-09 12:06:36 +01:00
o365_add_mailboxpermission.yml
Updated TAs (#3826)
2025-12-09 12:06:36 +01:00
o365_add_member_to_role_.yml
Updated TAs (#3826)
2025-12-09 12:06:36 +01:00
o365_add_owner_to_application_.yml
Updated TAs (#3826)
2025-12-09 12:06:36 +01:00
o365_add_service_principal_.yml
Updated TAs (#3826)
2025-12-09 12:06:36 +01:00
o365_change_user_license_.yml
Updated TAs (#3826)
2025-12-09 12:06:36 +01:00
o365_consent_to_application_.yml
Updated TAs (#3826)
2025-12-09 12:06:36 +01:00
o365_disable_strong_authentication_.yml
Updated TAs (#3826)
2025-12-09 12:06:36 +01:00
o365_mailitemsaccessed.yml
Updated TAs (#3826)
2025-12-09 12:06:36 +01:00
o365_modifyfolderpermissions.yml
Updated TAs (#3826)
2025-12-09 12:06:36 +01:00
o365_set_company_information_.yml
Updated TAs (#3826)
2025-12-09 12:06:36 +01:00
o365_set_mailbox.yml
Updated TAs (#3826)
2025-12-09 12:06:36 +01:00
o365_update_application_.yml
Updated TAs (#3826)
2025-12-09 12:06:36 +01:00
o365_update_authorization_policy_.yml
Updated TAs (#3826)
2025-12-09 12:06:36 +01:00
o365_update_user_.yml
Updated TAs (#3826)
2025-12-09 12:06:36 +01:00
o365_userloggedin.yml
Updated TAs (#3826)
2025-12-09 12:06:36 +01:00
o365_userloginfailed.yml
Updated TAs (#3826)
2025-12-09 12:06:36 +01:00
o365.yml
Updated TAs (#3826)
2025-12-09 12:06:36 +01:00
office_365_reporting_message_trace.yml
Updated TAs (#3826)
2025-12-09 12:06:36 +01:00
office_365_universal_audit_log.yml
Updated TAs (#3826)
2025-12-09 12:06:36 +01:00
okta.yml
Automated Splunk TA Update 473 (#3820)
2025-12-08 16:05:19 +01:00
ollama_server.yml
Add New MCP Related Detections (#3895)
2026-02-17 23:39:01 +01:00
osquery.yml
Fix unintended spacing updates
2025-01-23 10:09:09 -07:00
palo_alto_network_threat.yml
Merge branch 'develop' into output_normalization_endpoint
2025-03-19 15:10:33 +01:00
palo_alto_network_traffic.yml
Merge branch 'develop' into output_normalization_endpoint
2025-03-19 15:10:33 +01:00
pingid.yml
Fix unintended spacing updates
2025-01-23 10:09:09 -07:00
powershell_installed_iis_modules.yml
Fix unintended spacing updates
2025-01-23 10:09:09 -07:00
powershell_script_block_logging_4104.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
powershell_sip_inventory.yml
Fix unintended spacing updates
2025-01-23 10:09:09 -07:00
splunk_appdynamics_secure_application_alert.yml
Updated TAs (#3919)
2026-02-25 22:21:02 +05:30
splunk_common_information_model_(cim).yml
Automated Splunk TA Update 532 (#3891)
2026-02-06 18:21:07 +05:30
splunk_stream_http.yml
Automated Splunk TA Update 560 (#3938)
2026-03-06 12:26:52 +05:30
splunk_stream_ip.yml
Automated Splunk TA Update 560 (#3938)
2026-03-06 12:26:52 +05:30
splunk_stream_tcp.yml
Automated Splunk TA Update 560 (#3938)
2026-03-06 12:26:52 +05:30
splunk.yml
Fix unintended spacing updates
2025-01-23 10:09:09 -07:00
suricata.yml
Merge branch 'develop' into datasource_enrichment
2025-02-18 15:57:15 -06:00
sysmon_eventid_1.yml
Updated TAs
2025-08-07 07:02:29 +00:00
sysmon_eventid_3.yml
Updated TAs
2025-08-07 07:02:29 +00:00
sysmon_eventid_5.yml
Updated TAs
2025-08-07 07:02:29 +00:00
sysmon_eventid_6.yml
Updated TAs
2025-08-07 07:02:29 +00:00
sysmon_eventid_7.yml
Updated TAs
2025-08-07 07:02:29 +00:00
sysmon_eventid_8.yml
Updated TAs
2025-08-07 07:02:29 +00:00
sysmon_eventid_9.yml
Updated TAs
2025-08-07 07:02:29 +00:00
sysmon_eventid_10.yml
Updated TAs
2025-08-07 07:02:29 +00:00
sysmon_eventid_11.yml
Updated TAs
2025-08-07 07:02:29 +00:00
sysmon_eventid_12.yml
Updated TAs
2025-08-07 07:02:29 +00:00
sysmon_eventid_13.yml
Updated TAs
2025-08-07 07:02:29 +00:00
sysmon_eventid_14.yml
Updated TAs
2025-08-07 07:02:29 +00:00
sysmon_eventid_15.yml
Updated TAs
2025-08-07 07:02:29 +00:00
sysmon_eventid_17.yml
Updated TAs
2025-08-07 07:02:29 +00:00
sysmon_eventid_18.yml
Updated TAs
2025-08-07 07:02:29 +00:00
sysmon_eventid_20.yml
Updated TAs
2025-08-07 07:02:29 +00:00
sysmon_eventid_21.yml
Updated TAs
2025-08-07 07:02:29 +00:00
sysmon_eventid_22.yml
Updated TAs
2025-08-07 07:02:29 +00:00
sysmon_eventid_23.yml
Updated TAs
2025-08-07 07:02:29 +00:00
sysmon_eventid_26.yml
Updated TAs
2025-08-07 07:02:29 +00:00
sysmon_eventid_29.yml
netsupport (#3798)
2025-11-21 13:27:52 -08:00
sysmon_for_linux_eventid_1.yml
Merge branch 'develop' into output_normalization_endpoint
2025-03-19 15:10:33 +01:00
sysmon_for_linux_eventid_11.yml
Merge branch 'develop' into output_normalization_endpoint
2025-03-19 15:10:33 +01:00
vmware_esxi_syslog.yml
updating raw log (#3756)
2025-11-04 13:17:53 -08:00
windows_active_directory_admon.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_defender_alerts.yml
Updated TAs (#3858)
2026-01-10 14:20:32 +01:00
windows_event_log_application_2282.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_application_3000.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_application_8128.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_application_15457.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_application_17135.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_appxdeployment_server_400.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_appxdeployment_server_854.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_appxdeployment_server_855.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_appxpackaging_171.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_capi2_70.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_capi2_81.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_certificateservicesclient_1007.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_defender_1121.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_defender_1122.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_defender_1125.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_defender_1126.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_defender_1129.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_defender_1131.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_defender_1132.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_defender_1133.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_defender_1134.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_defender_5007.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_microsoft_windows_terminalservices_rdpclient_1024.yml
Fix unintended spacing updates
2025-01-23 10:09:09 -07:00
windows_event_log_printservice_316.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_printservice_808.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_printservice_4909.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_remoteconnectionmanager_1149.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_1100.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_1102.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4624.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4625.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4627.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4648.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4662.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4663.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4672.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4688.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4698.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4699.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4700.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4702.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4703.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4719.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4720.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4724.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4725.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4726.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4727.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4728.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4730.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4731.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4732.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4737.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4738.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4739.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4741.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4742.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4744.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4749.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4754.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4759.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4768.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4769.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4771.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4776.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4781.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4783.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4790.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4794.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4798.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4876.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4886.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4887.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4946.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4947.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_4948.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_5136.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_5137.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_5140.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_5141.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_security_5145.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_system_104.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_system_4720.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_system_4726.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_system_4728.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_system_7036.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_system_7040.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_system_7045.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_taskscheduler_200.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_event_log_taskscheduler_201.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_iis_29.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
windows_iis.yml
Updated TAs (#3832)
2025-12-12 15:06:49 +01:00
zeek_conn.yml
Updated TAs
2025-08-25 06:59:36 +00:00