admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
89902ee34b2716d703ba2cded4703bc1c867e2b2
splunk-security_content/data_sources
T
History
tccontre 89902ee34b auditd_data_source
2024-08-08 14:47:22 +02:00
..
aws_cloudfront.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_assumerolewithsaml.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_consolelogin.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_copyobject.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_createaccesskey.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_createkey.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_createloginprofile.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_createnetworkaclentry.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_createpolicyversion.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_createsnapshot.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_createtask.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_createvirtualmfadevice.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_deactivatemfadevice.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_deleteaccountpasswordpolicy.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_deletedetector.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_deletegroup.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_deleteipset.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_deleteloggroup.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_deletelogstream.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_deletenetworkaclentry.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_deletepolicy.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_deleterule.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_deletetrail.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_deletevirtualmfadevice.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_deletewebacl.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_describeeventaggregates.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_describeimagescanfindings.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_getaccountpasswordpolicy.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_getobject.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_getpassworddata.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_jobcreated.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_modifydbinstance.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_modifyimageattribute.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_modifysnapshotattribute.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_putbucketacl.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_putbucketlifecycle.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_putbucketreplication.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_putbucketversioning.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_putimage.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_putkeypolicy.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_replacenetworkaclentry.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_setdefaultpolicyversion.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_stoplogging.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_updateaccountpasswordpolicy.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_updateloginprofile.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_updatesamlprovider.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail_updatetrail.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudtrail.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_cloudwatchlogs_vpcflow.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
aws_security_hub.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
azure_active_directory_add_app_role_assignment_to_service_principal.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
azure_active_directory_add_member_to_role.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
azure_active_directory_add_owner_to_application.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
azure_active_directory_add_service_principal.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
azure_active_directory_add_unverified_domain.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
azure_active_directory_consent_to_application.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
azure_active_directory_disable_strong_authentication.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
azure_active_directory_enable_account.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
azure_active_directory_invite_external_user.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
azure_active_directory_reset_password_(by_admin).yml
improved data source TA version
2024-08-05 10:12:12 +02:00
azure_active_directory_set_domain_authentication.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
azure_active_directory_sign_in_activity.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
azure_active_directory_update_application.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
azure_active_directory_update_authorization_policy.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
azure_active_directory_update_user.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
azure_active_directory_user_registered_security_info.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
azure_active_directory.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
azure_audit_create_or_update_an_azure_automation_account.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
azure_audit_create_or_update_an_azure_automation_runbook.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
azure_audit_create_or_update_an_azure_automation_webhook.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
bro.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
circleci.yml
Better data source handling
2024-07-24 13:25:59 +02:00
crowdstrike_processrollup2.yml
Update crowdstrike ta
2024-08-05 16:42:40 -07:00
crushftp.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
g_suite_drive.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
g_suite_gmail.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
github.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
google_workspace_login_failure.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
google_workspace_login_success.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
kubernetes_audit.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
kubernetes_falco.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
Linux_Auditd_Add_User.yml
auditd_data_source
2024-08-08 14:47:22 +02:00
Linux_Auditd_Execve.yml
auditd_data_source
2024-08-08 14:47:22 +02:00
Linux_Auditd_Path.yml
auditd_data_source
2024-08-08 14:47:22 +02:00
Linux_Auditd_Proctitle.yml
auditd_data_source
2024-08-08 14:47:22 +02:00
Linux_Auditd_Service_Stop.yml
auditd_data_source
2024-08-08 14:47:22 +02:00
Linux_Auditd_Syscall.yml
auditd_data_source
2024-08-08 14:47:22 +02:00
linux_secure.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
nginx_access.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
o365_add_app_role_assignment_grant_to_user_.yml
Better data source handling
2024-07-24 13:25:59 +02:00
o365_add_app_role_assignment_to_service_principal_.yml
Better data source handling
2024-07-24 13:25:59 +02:00
o365_add_mailboxpermission.yml
Better data source handling
2024-07-24 13:25:59 +02:00
o365_add_member_to_role_.yml
Better data source handling
2024-07-24 13:25:59 +02:00
o365_add_owner_to_application_.yml
Better data source handling
2024-07-24 13:25:59 +02:00
o365_add_service_principal_.yml
Better data source handling
2024-07-24 13:25:59 +02:00
o365_change_user_license_.yml
Better data source handling
2024-07-24 13:25:59 +02:00
o365_consent_to_application_.yml
Better data source handling
2024-07-24 13:25:59 +02:00
o365_disable_strong_authentication_.yml
Better data source handling
2024-07-24 13:25:59 +02:00
o365_mailitemsaccessed.yml
Better data source handling
2024-07-24 13:25:59 +02:00
o365_modifyfolderpermissions.yml
Better data source handling
2024-07-24 13:25:59 +02:00
o365_set_company_information_.yml
Better data source handling
2024-07-24 13:25:59 +02:00
o365_set_mailbox.yml
Better data source handling
2024-07-24 13:25:59 +02:00
o365_update_application_.yml
Better data source handling
2024-07-24 13:25:59 +02:00
o365_update_authorization_policy_.yml
Better data source handling
2024-07-24 13:25:59 +02:00
o365_update_user_.yml
Better data source handling
2024-07-24 13:25:59 +02:00
o365_userloggedin.yml
Better data source handling
2024-07-24 13:25:59 +02:00
o365_userloginfailed.yml
Better data source handling
2024-07-24 13:25:59 +02:00
o365.yml
Better data source handling
2024-07-24 13:25:59 +02:00
okta.yml
Better data source handling
2024-07-24 13:25:59 +02:00
osquery.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
palo_alto_network_threat.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
palo_alto_network_traffic.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
pingid.yml
Better data source handling
2024-07-24 13:25:59 +02:00
powershell_installed_iis_modules.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
powershell_script_block_logging_4104.yml
Data Source Bug Fix
2024-08-07 16:21:33 +02:00
powershell_sip_inventory.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
splunk_stream_http.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
splunk_stream_ip.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
splunk_stream_tcp.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
splunk.yml
Better data source handling
2024-07-24 13:25:59 +02:00
suricata.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
sysmon_eventid_1.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
sysmon_eventid_3.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
sysmon_eventid_5.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
sysmon_eventid_6.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
sysmon_eventid_7.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
sysmon_eventid_8.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
sysmon_eventid_9.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
sysmon_eventid_10.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
sysmon_eventid_11.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
sysmon_eventid_12.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
sysmon_eventid_13.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
sysmon_eventid_15.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
sysmon_eventid_17.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
sysmon_eventid_18.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
sysmon_eventid_20.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
sysmon_eventid_21.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
sysmon_eventid_22.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
sysmon_eventid_23.yml
improved data source TA version
2024-08-05 10:12:12 +02:00
sysmon_for_linux_eventid_1.yml
Better data source handling
2024-07-24 13:25:59 +02:00
sysmon_for_linux_eventid_11.yml
Better data source handling
2024-07-24 13:25:59 +02:00
windows_active_directory_admon.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_application_2282.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_application_3000.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_capi2_70.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_capi2_81.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_certificateservicesclient_1007.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_defender_1121.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_defender_1122.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_defender_1129.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_defender_5007.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_printservice_316.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_printservice_808.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_remoteconnectionmanager_1149.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_1100.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_1102.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4624.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4625.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4627.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4648.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4662.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4663.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4672.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4688.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4698.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4699.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4703.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4719.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4720.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4724.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4725.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4726.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4732.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4738.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4739.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4741.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4742.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4768.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4769.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4771.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4776.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4781.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4794.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4798.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4876.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4886.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_4887.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_5136.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_5137.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_5140.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_5141.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_security_5145.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_system_4720.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_system_4726.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_system_4728.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_system_7036.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_system_7040.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_system_7045.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_event_log_taskscheduler_200.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_iis_29.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
windows_iis.yml
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00