pyth0n1c d5fb6c520c update ymls so that they refer to the correct names ...

of datasources. this was mostly removing spaces
to convert "Sysmon Event ID N" to
"Sysmon EventID N". Also fix some ymls
that used the field "data_sources" when
it should be "data_source"

2024-09-26 14:48:44 -07:00

..

aws_cloudfront.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_assumerolewithsaml.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_consolelogin.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_copyobject.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_createaccesskey.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_createkey.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_createloginprofile.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_createnetworkaclentry.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_createpolicyversion.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_createsnapshot.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_createtask.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_createvirtualmfadevice.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deactivatemfadevice.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deleteaccountpasswordpolicy.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deletealarms.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deletedetector.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deletegroup.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deleteipset.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deleteloggroup.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deletelogstream.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deletenetworkaclentry.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deletepolicy.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deleterule.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deletesnapshot.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deletetrail.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deletevirtualmfadevice.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_deletewebacl.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_describeeventaggregates.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_describeimagescanfindings.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_getaccountpasswordpolicy.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_getobject.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_getpassworddata.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_jobcreated.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_modifydbinstance.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_modifyimageattribute.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_modifysnapshotattribute.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_putbucketacl.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_putbucketlifecycle.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_putbucketreplication.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_putbucketversioning.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_putimage.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_putkeypolicy.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_replacenetworkaclentry.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_setdefaultpolicyversion.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_stoplogging.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_updateaccountpasswordpolicy.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_updateloginprofile.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_updatesamlprovider.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail_updatetrail.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudtrail.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_cloudwatchlogs_vpcflow.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

aws_security_hub.yml

bump aws ta version

2024-08-30 07:43:21 +02:00

azure_active_directory_add_app_role_assignment_to_service_principal.yml

Updated TAs

2024-09-15 06:57:47 +00:00

azure_active_directory_add_member_to_role.yml

Updated TAs

2024-09-15 06:57:47 +00:00

azure_active_directory_add_owner_to_application.yml

Updated TAs

2024-09-15 06:57:47 +00:00

azure_active_directory_add_service_principal.yml

Updated TAs

2024-09-15 06:57:47 +00:00

azure_active_directory_add_unverified_domain.yml

Updated TAs

2024-09-15 06:57:47 +00:00

azure_active_directory_consent_to_application.yml

Updated TAs

2024-09-15 06:57:47 +00:00

azure_active_directory_disable_strong_authentication.yml

Updated TAs

2024-09-15 06:57:47 +00:00

azure_active_directory_enable_account.yml

Updated TAs

2024-09-15 06:57:47 +00:00

azure_active_directory_invite_external_user.yml

Updated TAs

2024-09-15 06:57:47 +00:00

azure_active_directory_reset_password_(by_admin).yml

Updated TAs

2024-09-15 06:57:47 +00:00

azure_active_directory_set_domain_authentication.yml

Updated TAs

2024-09-15 06:57:47 +00:00

azure_active_directory_sign_in_activity.yml

Updated TAs

2024-09-15 06:57:47 +00:00

azure_active_directory_update_application.yml

Updated TAs

2024-09-15 06:57:47 +00:00

azure_active_directory_update_authorization_policy.yml

Updated TAs

2024-09-15 06:57:47 +00:00

azure_active_directory_update_user.yml

Updated TAs

2024-09-15 06:57:47 +00:00

azure_active_directory_user_registered_security_info.yml

Updated TAs

2024-09-15 06:57:47 +00:00

azure_active_directory.yml

Updated TAs

2024-09-15 06:57:47 +00:00

azure_audit_create_or_update_an_azure_automation_account.yml

Updated TAs

2024-09-15 06:57:47 +00:00

azure_audit_create_or_update_an_azure_automation_runbook.yml

Updated TAs

2024-09-15 06:57:47 +00:00

azure_audit_create_or_update_an_azure_automation_webhook.yml

Updated TAs

2024-09-15 06:57:47 +00:00

bro.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

circleci.yml

Better data source handling

2024-07-24 13:25:59 +02:00

crowdstrike_processrollup2.yml

Update crowdstrike ta

2024-08-05 16:42:40 -07:00

crushftp.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

g_suite_drive.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

g_suite_gmail.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

github.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

google_workspace_login_failure.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

google_workspace_login_success.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

ivanti_vtm_audit.yml

updating data source

2024-08-22 21:49:40 +05:30

kubernetes_audit.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

kubernetes_falco.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

linux_auditd_add_user.yml

auditd_data_source

2024-08-08 15:06:44 +02:00

linux_auditd_execve.yml

auditd_data_source

2024-08-08 15:00:58 +02:00

linux_auditd_path.yml

auditd_data_source

2024-08-08 15:00:58 +02:00

linux_auditd_proctitle.yml

auditd_data_source

2024-08-08 15:00:58 +02:00

linux_auditd_service_stop.yml

auditd_data_source

2024-08-08 15:06:44 +02:00

linux_auditd_syscall.yml

auditd_data_source

2024-08-08 15:00:58 +02:00

linux_secure.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

nginx_access.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

o365_add_app_role_assignment_grant_to_user_.yml

Updated TAs

2024-09-18 06:57:39 +00:00

o365_add_app_role_assignment_to_service_principal_.yml

Updated TAs

2024-09-18 06:57:39 +00:00

o365_add_mailboxpermission.yml

Updated TAs

2024-09-18 06:57:39 +00:00

o365_add_member_to_role_.yml

Updated TAs

2024-09-18 06:57:39 +00:00

o365_add_owner_to_application_.yml

Updated TAs

2024-09-18 06:57:39 +00:00

o365_add_service_principal_.yml

Updated TAs

2024-09-18 06:57:39 +00:00

o365_change_user_license_.yml

Updated TAs

2024-09-18 06:57:39 +00:00

o365_consent_to_application_.yml

Updated TAs

2024-09-18 06:57:39 +00:00

o365_disable_strong_authentication_.yml

Updated TAs

2024-09-18 06:57:39 +00:00

o365_mailitemsaccessed.yml

Updated TAs

2024-09-18 06:57:39 +00:00

o365_modifyfolderpermissions.yml

Updated TAs

2024-09-18 06:57:39 +00:00

o365_set_company_information_.yml

Updated TAs

2024-09-18 06:57:39 +00:00

o365_set_mailbox.yml

Updated TAs

2024-09-18 06:57:39 +00:00

o365_update_application_.yml

Updated TAs

2024-09-18 06:57:39 +00:00

o365_update_authorization_policy_.yml

Updated TAs

2024-09-18 06:57:39 +00:00

o365_update_user_.yml

Updated TAs

2024-09-18 06:57:39 +00:00

o365_userloggedin.yml

Updated TAs

2024-09-18 06:57:39 +00:00

o365_userloginfailed.yml

Updated TAs

2024-09-18 06:57:39 +00:00

o365.yml

Updated TAs

2024-09-18 06:57:39 +00:00

okta.yml

Updated TAs

2024-09-05 06:57:54 +00:00

osquery.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

palo_alto_network_threat.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

palo_alto_network_traffic.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

pingid.yml

Better data source handling

2024-07-24 13:25:59 +02:00

powershell_installed_iis_modules.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

powershell_script_block_logging_4104.yml

Data Source Bug Fix

2024-08-07 16:21:33 +02:00

powershell_sip_inventory.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

splunk_stream_http.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

splunk_stream_ip.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

splunk_stream_tcp.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

splunk.yml

Better data source handling

2024-07-24 13:25:59 +02:00

suricata.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

sysmon_eventid_1.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_3.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_5.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_6.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_7.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_8.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_9.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_10.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_11.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_12.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_13.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_15.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_17.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_18.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_20.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_21.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_22.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_eventid_23.yml

improved data source TA version

2024-08-05 10:12:12 +02:00

sysmon_for_linux_eventid_1.yml

Better data source handling

2024-07-24 13:25:59 +02:00

sysmon_for_linux_eventid_11.yml

Better data source handling

2024-07-24 13:25:59 +02:00

windows_active_directory_admon.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_application_2282.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_application_3000.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_capi2_70.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_capi2_81.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_certificateservicesclient_1007.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_defender_1121.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_defender_1122.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_defender_1129.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_defender_5007.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_printservice_316.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_printservice_808.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_remoteconnectionmanager_1149.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_1100.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_1102.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4624.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4625.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4627.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4648.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4662.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4663.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4672.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4688.yml

update ymls so that they refer to the correct names

2024-09-26 14:48:44 -07:00

windows_event_log_security_4698.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4699.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4703.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4719.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4720.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4724.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4725.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4726.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4732.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4738.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4739.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4741.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4742.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4768.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4769.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4771.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4776.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4781.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4794.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4798.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4876.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4886.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_4887.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_5136.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_5137.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_5140.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_5141.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_security_5145.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_system_4720.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_system_4726.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_system_4728.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_system_7036.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_system_7040.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_system_7045.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_event_log_taskscheduler_200.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_iis_29.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00

windows_iis.yml

Improve TA names to match the naming in Splunk

2024-07-31 09:58:03 +02:00