security_content/macros at develop · splunk/security_content

History

Name		Name	Last commit message	Last commit date
parent directory ..
deprecated		deprecated
admon.yml		admon.yml
amazon_security_lake.yml		amazon_security_lake.yml
appdynamics_security.yml		appdynamics_security.yml
applocker.yml		applocker.yml
audittrail.yml		audittrail.yml
aws_bedrock_claude.yml		aws_bedrock_claude.yml
aws_cloudwatchlogs_eks.yml		aws_cloudwatchlogs_eks.yml
aws_ecr_users.yml		aws_ecr_users.yml
aws_ecr_users_asl.yml		aws_ecr_users_asl.yml
aws_s3_accesslogs.yml		aws_s3_accesslogs.yml
aws_securityhub_finding.yml		aws_securityhub_finding.yml
azure_audit.yml		azure_audit.yml
azure_monitor_aad.yml		azure_monitor_aad.yml
azure_monitor_activity.yml		azure_monitor_activity.yml
base64decode.yml		base64decode.yml
bootloader_inventory.yml		bootloader_inventory.yml
capi2_operational.yml		capi2_operational.yml
certificateservices_lifecycle.yml		certificateservices_lifecycle.yml
circleci.yml		circleci.yml
cisco_ai_defense.yml		cisco_ai_defense.yml
cisco_asa.yml		cisco_asa.yml
cisco_duo_activity.yml		cisco_duo_activity.yml
cisco_duo_administrator.yml		cisco_duo_administrator.yml
cisco_ios.yml		cisco_ios.yml
cisco_isovalent.yml		cisco_isovalent.yml
cisco_isovalent_allowed_images.yml		cisco_isovalent_allowed_images.yml
cisco_isovalent_process_connect.yml		cisco_isovalent_process_connect.yml
cisco_isovalent_process_exec.yml		cisco_isovalent_process_exec.yml
cisco_network_visibility_module_flowdata.yml		cisco_network_visibility_module_flowdata.yml
cisco_networks.yml		cisco_networks.yml
cisco_sd_wan_service_proxy_access.yml		cisco_sd_wan_service_proxy_access.yml
cisco_sd_wan_syslog.yml		cisco_sd_wan_syslog.yml
cisco_secure_access_dns.yml		cisco_secure_access_dns.yml
cisco_secure_access_proxy.yml		cisco_secure_access_proxy.yml
cisco_secure_firewall.yml		cisco_secure_firewall.yml
cisco_secure_firewall_inside_to_outside.yml		cisco_secure_firewall_inside_to_outside.yml
cloudtrail.yml		cloudtrail.yml
cloudwatchlogs_vpcflow.yml		cloudwatchlogs_vpcflow.yml
crowdstrike_identities.yml		crowdstrike_identities.yml
crowdstrike_stream.yml		crowdstrike_stream.yml
crushftp.yml		crushftp.yml
driverinventory.yml		driverinventory.yml
ec2_modification_api_calls.yml		ec2_modification_api_calls.yml
esxi_syslog.yml		esxi_syslog.yml
excluded_cloud_binaries.yml		excluded_cloud_binaries.yml
executable_extensions.yml		executable_extensions.yml
f5_bigip_rogue.yml		f5_bigip_rogue.yml
fillnull_config.yml		fillnull_config.yml
github_enterprise.yml		github_enterprise.yml
github_organizations.yml		github_organizations.yml
google_gcp_pubsub_message.yml		google_gcp_pubsub_message.yml
gsuite_calendar.yml		gsuite_calendar.yml
gsuite_drive.yml		gsuite_drive.yml
gsuite_gmail.yml		gsuite_gmail.yml
gws_login_mfa_methods.yml		gws_login_mfa_methods.yml
gws_reports_admin.yml		gws_reports_admin.yml
gws_reports_login.yml		gws_reports_login.yml
iis_get_webglobalmodule.yml		iis_get_webglobalmodule.yml
iis_operational_logs.yml		iis_operational_logs.yml
important_audit_policy_subcategory_guids.yml		important_audit_policy_subcategory_guids.yml
ivanti_vtm_audit.yml		ivanti_vtm_audit.yml
kube_allowed_images.yml		kube_allowed_images.yml
kube_allowed_locations.yml		kube_allowed_locations.yml
kube_allowed_user_agents.yml		kube_allowed_user_agents.yml
kube_allowed_user_groups.yml		kube_allowed_user_groups.yml
kube_allowed_user_names.yml		kube_allowed_user_names.yml
kube_audit.yml		kube_audit.yml
kube_container_falco.yml		kube_container_falco.yml
kube_objects_events.yml		kube_objects_events.yml
kubernetes_container_controller.yml		kubernetes_container_controller.yml
kubernetes_metrics.yml		kubernetes_metrics.yml
linux_auditd.yml		linux_auditd.yml
linux_hosts.yml		linux_hosts.yml
linux_offsec_tool_processes.yml		linux_offsec_tool_processes.yml
linux_shells.yml		linux_shells.yml
linux_syslog.yml		linux_syslog.yml
m365_copilot_graph_api.yml		m365_copilot_graph_api.yml
m365_exported_ediscovery_prompt_logs.yml		m365_exported_ediscovery_prompt_logs.yml
mcp_server.yml		mcp_server.yml
moveit_sftp_logs.yml		moveit_sftp_logs.yml
ms365_defender_incident_alerts.yml		ms365_defender_incident_alerts.yml
ms_defender.yml		ms_defender.yml
ms_defender_atp_alerts.yml		ms_defender_atp_alerts.yml
msexchange_management.yml		msexchange_management.yml
network_acl_events.yml		network_acl_events.yml
nginx_access_logs.yml		nginx_access_logs.yml
non_public_ip_blocks.yml		non_public_ip_blocks.yml
normalized_service_binary_field.yml		normalized_service_binary_field.yml
ntlm_audit.yml		ntlm_audit.yml
o365_graph.yml		o365_graph.yml
o365_management_activity.yml		o365_management_activity.yml
o365_messagetrace.yml		o365_messagetrace.yml
o365_suspect_search_terms_regex.yml		o365_suspect_search_terms_regex.yml
okta.yml		okta.yml
oldsummaries_config.yml		oldsummaries_config.yml
ollama_server.yml		ollama_server.yml
osquery_macro.yml		osquery_macro.yml
osquery_process.yml		osquery_process.yml
papercutng.yml		papercutng.yml

Navigation Menu

Uh oh!

Uh oh!

FilesExpand file tree

macros

Directory actions

More options

Directory actions

More options

Latest commit

History

macros

Folders and files

parent directory