splunk-security_content/docs/spec

README

Top-level Schemas

• Analytics Story Schema – http://example.com/example.json

• Baseline Schema – http://example.com/example.json

• Deployment Schema – http://example.com/example.json

• Detection Schema – http://example.com/example.json

• Lookup Manifest – https://api.splunkresearch.com/schemas/lookups.json

• Macro Manifest – https://api.splunkresearch.com/schemas/macros.json

• Response Schema – https://raw.githubusercontent.com/splunk/security_content/develop/docs/spec/response_tasks.spec.json

• Response Schema – https://raw.githubusercontent.com/splunk/security_content/develop/docs/spec/response.spec.json

• Response Schema – http://example.com/example.json

Other Schemas

Objects

• Untitled object in Baseline Schema – #/properties/tags#/properties/tags

• Untitled object in Deployment Schema – #/properties/alert_action#/properties/alert_action

• Untitled object in Deployment Schema – #/properties/alert_action/properties/email#/properties/alert_action/properties/email

• Untitled object in Deployment Schema – #/properties/alert_action/properties/index#/properties/alert_action/properties/index

• Untitled object in Deployment Schema – #/properties/alert_action/properties/notable#/properties/alert_action/properties/notable

• Untitled object in Deployment Schema – #/properties/scheduling#/properties/scheduling

• Untitled object in Response Schema – #/properties/automation#/properties/automation

Arrays

• Untitled array in Baseline Schema – #/properties/datamodel#/properties/datamodel

• Untitled array in Detection Schema – #/properties/references#/properties/references

• Untitled array in Macro Manifest – https://api.splunkresearch.com/schemas/macros.json#/properties/arguments

• Untitled array in Response Schema – #/properties/response_phases#/properties/response_phase

• Untitled array in Response Schema – #/properties/response_task#/properties/response_task