mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
244 lines
8.5 KiB
YAML
244 lines
8.5 KiB
YAML
version_control_config:
|
|
target_branch: develop
|
|
infrastructure_config:
|
|
infrastructure_type: container
|
|
full_image_path: registry.hub.docker.com/splunk/splunk:latest
|
|
post_test_behavior: pause_on_failure
|
|
mode: changes
|
|
detections_list: null
|
|
splunkbase_username: null
|
|
splunkbase_password: null
|
|
apps:
|
|
- uid: 6176
|
|
appid: Splunk_TA_linux_sysmon
|
|
title: Add-on for Linux Sysmon
|
|
description: null
|
|
release: 1.0.4
|
|
local_path: null
|
|
http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/add-on-for-linux-sysmon_104.tgz
|
|
splunkbase_path: null
|
|
environment_path: ENVIRONMENT_PATH_NOT_SET
|
|
force_local: false
|
|
# The Following TA does NOT exist on Splunkbase. It fixes a parsing issue that occurs when raw xmlwineventlog events
|
|
# are replayed together at a HEC endpoint. This issue does not exist when logs are sent by a Universal Forwarder
|
|
- uid: 9999
|
|
appid: Splunk_FIX_XMLWINEVENTLOG_HEC_PARSING
|
|
title: Splunk Fix XmlWinEventLog HEC Parsing
|
|
description: null
|
|
release: 0.1
|
|
local_path: null
|
|
http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/Splunk_TA_fix_windows.tgz
|
|
splunkbase_path: null
|
|
environment_path: ENVIRONMENT_PATH_NOT_SET
|
|
force_local: false
|
|
- uid: 742
|
|
appid: SPLUNK_ADD_ON_FOR_MICROSOFT_WINDOWS
|
|
title: Splunk Add-on for Microsoft Windows
|
|
description: null
|
|
release: 8.8.0
|
|
local_path: null
|
|
http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-microsoft-windows_880.tgz
|
|
splunkbase_path: null
|
|
environment_path: ENVIRONMENT_PATH_NOT_SET
|
|
force_local: false
|
|
- uid: 5709
|
|
appid: Splunk_TA_microsoft_sysmon
|
|
title: Splunk Add-on for Sysmon
|
|
description: null
|
|
release: 3.1.0
|
|
local_path: null
|
|
http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-sysmon_310.tgz
|
|
splunkbase_path: null
|
|
environment_path: ENVIRONMENT_PATH_NOT_SET
|
|
force_local: false
|
|
- uid: 833
|
|
appid: Splunk_TA_nix
|
|
title: Splunk Add-on for Unix and Linux
|
|
description: null
|
|
release: 9.0.0
|
|
local_path: null
|
|
http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-unix-and-linux_900.tgz
|
|
splunkbase_path: null
|
|
environment_path: ENVIRONMENT_PATH_NOT_SET
|
|
force_local: false
|
|
- uid: 5579
|
|
appid: Splunk_TA_CrowdStrike_FDR
|
|
title: Splunk Add-on for CrowdStrike FDR
|
|
description: null
|
|
release: 1.4.0
|
|
local_path: null
|
|
http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-crowdstrike-fdr_140.tgz
|
|
splunkbase_path: null
|
|
environment_path: ENVIRONMENT_PATH_NOT_SET
|
|
force_local: false
|
|
- uid: 3185
|
|
appid: SPLUNK_TA_FOR_IIS
|
|
title: Splunk Add-on for Microsoft IIS
|
|
description: null
|
|
release: 1.2.0
|
|
local_path: null
|
|
http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-microsoft-iis_120.tgz
|
|
splunkbase_path: null
|
|
environment_path: ENVIRONMENT_PATH_NOT_SET
|
|
force_local: false
|
|
- uid: 4242
|
|
appid: SPLUNK_TA_FOR_SURICATA
|
|
title: TA for Suricata
|
|
description: null
|
|
release: 2.3.4
|
|
local_path: null
|
|
http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/ta-for-suricata_234.tgz
|
|
splunkbase_path: null
|
|
environment_path: ENVIRONMENT_PATH_NOT_SET
|
|
force_local: false
|
|
- uid: 5466
|
|
appid: SPLUNK_TA_FOR_ZEEK
|
|
title: TA for Zeek
|
|
description: null
|
|
release: 1.0.5
|
|
local_path: null
|
|
http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/ta-for-zeek_105.tgz
|
|
splunkbase_path: null
|
|
environment_path: ENVIRONMENT_PATH_NOT_SET
|
|
force_local: false
|
|
- uid: 3258
|
|
appid: SPLUNK_ADD_ON_FOR_NGINX
|
|
title: Splunk Add-on for NGINX
|
|
description: null
|
|
release: 3.2.1
|
|
local_path: null
|
|
http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-nginx_321.tgz
|
|
splunkbase_path: null
|
|
environment_path: ENVIRONMENT_PATH_NOT_SET
|
|
force_local: false
|
|
- uid: 5238
|
|
appid: SPLUNK_ADD_ON_FOR_STREAM_FORWARDERS
|
|
title: Splunk Add-on for Stream Forwarders
|
|
description: null
|
|
release: 8.1.1
|
|
local_path: null
|
|
http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-stream-forwarders_811.tgz
|
|
splunkbase_path: null
|
|
environment_path: ENVIRONMENT_PATH_NOT_SET
|
|
force_local: false
|
|
- uid: 5234
|
|
appid: SPLUNK_ADD_ON_FOR_STREAM_WIRE_DATA
|
|
title: Splunk Add-on for Stream Wire Data
|
|
description: null
|
|
release: 8.1.1
|
|
local_path: null
|
|
http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-stream-wire-data_811.tgz
|
|
splunkbase_path: null
|
|
environment_path: ENVIRONMENT_PATH_NOT_SET
|
|
force_local: false
|
|
- uid: 2757
|
|
appid: PALO_ALTO_NETWORKS_ADD_ON_FOR_SPLUNK
|
|
title: Palo Alto Networks Add-on for Splunk
|
|
description: null
|
|
release: 8.1.0
|
|
local_path: null
|
|
http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/palo-alto-networks-add-on-for-splunk_810.tgz
|
|
splunkbase_path: null
|
|
environment_path: ENVIRONMENT_PATH_NOT_SET
|
|
force_local: false
|
|
- uid: 3865
|
|
appid: TA-Zscaler_CIM
|
|
title: Zscaler Technical Add-On for Splunk
|
|
description: null
|
|
release: 4.0.3
|
|
local_path: null
|
|
http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/zscaler-technical-add-on-for-splunk_403.tgz
|
|
splunkbase_path: null
|
|
environment_path: ENVIRONMENT_PATH_NOT_SET
|
|
force_local: false
|
|
- uid: 3719
|
|
appid: SPLUNK_ADD_ON_FOR_AMAZON_KINESIS_FIREHOSE
|
|
title: Splunk Add-on for Amazon Kinesis Firehose
|
|
description: null
|
|
release: 1.3.2
|
|
local_path: null
|
|
http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-amazon-kinesis-firehose_132.tgz
|
|
splunkbase_path: null
|
|
environment_path: ENVIRONMENT_PATH_NOT_SET
|
|
force_local: false
|
|
- uid: 1876
|
|
appid: Splunk_TA_aws
|
|
title: Splunk Add-on for AWS
|
|
description: null
|
|
release: 7.2.0
|
|
local_path: null
|
|
http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-amazon-web-services-aws_720.tgz
|
|
splunkbase_path: null
|
|
environment_path: ENVIRONMENT_PATH_NOT_SET
|
|
force_local: false
|
|
- uid: 3088
|
|
appid: SPLUNK_ADD_ON_FOR_GOOGLE_CLOUD_PLATFORM
|
|
title: Splunk Add-on for Google Cloud Platform
|
|
description: null
|
|
release: 4.3.0
|
|
local_path: null
|
|
http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-google-cloud-platform_430.tgz
|
|
splunkbase_path: null
|
|
environment_path: ENVIRONMENT_PATH_NOT_SET
|
|
force_local: false
|
|
- uid: 5556
|
|
appid: SPLUNK_ADD_ON_FOR_GOOGLE_WORKSPACE
|
|
title: Splunk Add-on for Google Workspace
|
|
description: null
|
|
release: 2.6.0
|
|
local_path: null
|
|
http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-google-workspace_260.tgz
|
|
splunkbase_path: null
|
|
environment_path: ENVIRONMENT_PATH_NOT_SET
|
|
force_local: false
|
|
- uid: 3110
|
|
appid: SPLUNK_TA_MICROSOFT_CLOUD_SERVICES
|
|
title: Splunk Add-on for Microsoft Cloud Services
|
|
description: null
|
|
release: 5.2.1
|
|
local_path: null
|
|
http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-microsoft-cloud-services_521.tgz
|
|
splunkbase_path: null
|
|
environment_path: ENVIRONMENT_PATH_NOT_SET
|
|
force_local: false
|
|
- uid: 4055
|
|
appid: SPLUNK_ADD_ON_FOR_MICROSOFT_OFFICE_365
|
|
title: Splunk Add-on for Microsoft Office 365
|
|
description: null
|
|
release: 4.3.0
|
|
local_path: null
|
|
http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-add-on-for-microsoft-office-365_430.tgz
|
|
splunkbase_path: null
|
|
environment_path: ENVIRONMENT_PATH_NOT_SET
|
|
force_local: false
|
|
- uid: 2890
|
|
appid: SPLUNK_MACHINE_LEARNING_TOOLKIT
|
|
title: Splunk Machine Learning Toolkit
|
|
description: null
|
|
release: 5.4.1
|
|
local_path: null
|
|
http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-machine-learning-toolkit_541.tgz
|
|
splunkbase_path: null
|
|
environment_path: ENVIRONMENT_PATH_NOT_SET
|
|
force_local: false
|
|
- uid: 2734
|
|
appid: URL_TOOLBOX
|
|
title: URL Toolbox
|
|
description: null
|
|
release: 1.9.2
|
|
local_path: null
|
|
http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/url-toolbox_192.tgz
|
|
splunkbase_path: null
|
|
environment_path: ENVIRONMENT_PATH_NOT_SET
|
|
force_local: false
|
|
- uid: 1621
|
|
appid: Splunk_SA_CIM
|
|
title: Splunk Common Information Model (CIM)
|
|
description: null
|
|
release: 5.2.0
|
|
local_path: null
|
|
http_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/Latest/splunk-common-information-model-cim_520.tgz
|
|
splunkbase_path: null
|
|
environment_path: ENVIRONMENT_PATH_NOT_SET
|
|
force_local: false
|