Updating Github with Content from ESCU - v4.35.0

splunk · Jul 1, 2024 · fb20d89 · fb20d89
1 parent 17ccc9b
commit fb20d89
Show file tree

Hide file tree

Showing 63 changed files with 729 additions and 107 deletions.
diff --git a/contentctl.yml b/contentctl.yml
@@ -3,7 +3,7 @@ app:
   uid: 3449
   title: ES Content Updates
   appid: DA-ESS-ContentUpdate
-  version: 4.34.0
+  version: 4.35.0
   description: Explore the Analytic Stories included with ES Content Updates.
   prefix: ESCU
   label: ESCU

diff --git a/dist/DA-ESS-ContentUpdate/app.manifest b/dist/DA-ESS-ContentUpdate/app.manifest
@@ -5,7 +5,7 @@
     "id": {
       "group": null, 
       "name": "DA-ESS-ContentUpdate", 
-      "version": "4.34.0"
+      "version": "4.35.0"
     }, 
     "author": [
       {
@@ -14,7 +14,7 @@
         "company": "Splunk"
       }
     ], 
-    "releaseDate": "2024-06-26", 
+    "releaseDate": "2024-07-01", 
     "description": "Explore the Analytic Stories included with ES Content Updates.", 
     "classification": {
       "intendedAudience": null, 

diff --git a/dist/DA-ESS-ContentUpdate/default/analyticstories.conf b/dist/DA-ESS-ContentUpdate/default/analyticstories.conf
diff --git a/dist/DA-ESS-ContentUpdate/default/app.conf b/dist/DA-ESS-ContentUpdate/default/app.conf
@@ -1,7 +1,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:58 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############
@@ -11,7 +11,7 @@
 is_configured = false
 state = enabled
 state_change_requires_restart = false
-build = 20240626201627
+build = 20240701174052
 
 [triggers]
 reload.analytic_stories = simple
@@ -27,7 +27,7 @@ reload.es_investigations = simple
 
 [launcher]
 author = Splunk
-version = 4.34.0 
+version = 4.35.0 
 description = Explore the Analytic Stories included with ES Content Updates.
 
 [ui]

diff --git a/dist/DA-ESS-ContentUpdate/default/collections.conf b/dist/DA-ESS-ContentUpdate/default/collections.conf
@@ -1,7 +1,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:58 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/dist/DA-ESS-ContentUpdate/default/content-version.conf b/dist/DA-ESS-ContentUpdate/default/content-version.conf
@@ -1,9 +1,9 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:58 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############
 [content-version]
-version = 4.34.0 
+version = 4.35.0 
diff --git a/...pdate/default/data/ui/panels/workbench_panel_all_backup_logs_for_host___response_task.xml b/...pdate/default/data/ui/panels/workbench_panel_all_backup_logs_for_host___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...ta/ui/panels/workbench_panel_amazon_eks_kubernetes_activity_by_src_ip___response_task.xml b/...ta/ui/panels/workbench_panel_amazon_eks_kubernetes_activity_by_src_ip___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...ui/panels/workbench_panel_aws_investigate_security_hub_alerts_by_dest___response_task.xml b/...ui/panels/workbench_panel_aws_investigate_security_hub_alerts_by_dest___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...panels/workbench_panel_aws_investigate_user_activities_by_accesskeyid___response_task.xml b/...panels/workbench_panel_aws_investigate_user_activities_by_accesskeyid___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...data/ui/panels/workbench_panel_aws_investigate_user_activities_by_arn___response_task.xml b/...data/ui/panels/workbench_panel_aws_investigate_user_activities_by_arn___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...efault/data/ui/panels/workbench_panel_aws_network_acl_details_from_id___response_task.xml b/...efault/data/ui/panels/workbench_panel_aws_network_acl_details_from_id___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...i/panels/workbench_panel_aws_network_interface_details_via_resourceid___response_task.xml b/...i/panels/workbench_panel_aws_network_interface_details_via_resourceid___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...t/data/ui/panels/workbench_panel_aws_s3_bucket_details_via_bucketname___response_task.xml b/...t/data/ui/panels/workbench_panel_aws_s3_bucket_details_via_bucketname___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...ault/data/ui/panels/workbench_panel_gcp_kubernetes_activity_by_src_ip___response_task.xml b/...ault/data/ui/panels/workbench_panel_gcp_kubernetes_activity_by_src_ip___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...default/data/ui/panels/workbench_panel_get_all_aws_activity_from_city___response_task.xml b/...default/data/ui/panels/workbench_panel_get_all_aws_activity_from_city___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...ault/data/ui/panels/workbench_panel_get_all_aws_activity_from_country___response_task.xml b/...ault/data/ui/panels/workbench_panel_get_all_aws_activity_from_country___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...t/data/ui/panels/workbench_panel_get_all_aws_activity_from_ip_address___response_task.xml b/...t/data/ui/panels/workbench_panel_get_all_aws_activity_from_ip_address___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...fault/data/ui/panels/workbench_panel_get_all_aws_activity_from_region___response_task.xml b/...fault/data/ui/panels/workbench_panel_get_all_aws_activity_from_region___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...e/default/data/ui/panels/workbench_panel_get_backup_logs_for_endpoint___response_task.xml b/...e/default/data/ui/panels/workbench_panel_get_backup_logs_for_endpoint___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...ault/data/ui/panels/workbench_panel_get_certificate_logs_for_a_domain___response_task.xml b/...ault/data/ui/panels/workbench_panel_get_certificate_logs_for_a_domain___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...ault/data/ui/panels/workbench_panel_get_dns_server_history_for_a_host___response_task.xml b/...ault/data/ui/panels/workbench_panel_get_dns_server_history_for_a_host___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...ntUpdate/default/data/ui/panels/workbench_panel_get_dns_traffic_ratio___response_task.xml b/...ntUpdate/default/data/ui/panels/workbench_panel_get_dns_traffic_ratio___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...data/ui/panels/workbench_panel_get_ec2_instance_details_by_instanceid___response_task.xml b/...data/ui/panels/workbench_panel_get_ec2_instance_details_by_instanceid___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...tUpdate/default/data/ui/panels/workbench_panel_get_ec2_launch_details___response_task.xml b/...tUpdate/default/data/ui/panels/workbench_panel_get_ec2_launch_details___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...S-ContentUpdate/default/data/ui/panels/workbench_panel_get_email_info___response_task.xml b/...S-ContentUpdate/default/data/ui/panels/workbench_panel_get_email_info___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...efault/data/ui/panels/workbench_panel_get_emails_from_specific_sender___response_task.xml b/...efault/data/ui/panels/workbench_panel_get_emails_from_specific_sender___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...bench_panel_get_first_occurrence_and_last_occurrence_of_a_mac_address___response_task.xml b/...bench_panel_get_first_occurrence_and_last_occurrence_of_a_mac_address___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...e/default/data/ui/panels/workbench_panel_get_history_of_email_sources___response_task.xml b/...e/default/data/ui/panels/workbench_panel_get_history_of_email_sources___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...ui/panels/workbench_panel_get_logon_rights_modifications_for_endpoint___response_task.xml b/...ui/panels/workbench_panel_get_logon_rights_modifications_for_endpoint___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...ata/ui/panels/workbench_panel_get_logon_rights_modifications_for_user___response_task.xml b/...ata/ui/panels/workbench_panel_get_logon_rights_modifications_for_user___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...tentUpdate/default/data/ui/panels/workbench_panel_get_notable_history___response_task.xml b/...tentUpdate/default/data/ui/panels/workbench_panel_get_notable_history___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...Update/default/data/ui/panels/workbench_panel_get_parent_process_info___response_task.xml b/...Update/default/data/ui/panels/workbench_panel_get_parent_process_info___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...date/default/data/ui/panels/workbench_panel_get_process_file_activity___response_task.xml b/...date/default/data/ui/panels/workbench_panel_get_process_file_activity___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...ContentUpdate/default/data/ui/panels/workbench_panel_get_process_info___response_task.xml b/...ContentUpdate/default/data/ui/panels/workbench_panel_get_process_info___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...a/ui/panels/workbench_panel_get_process_information_for_port_activity___response_task.xml b/...a/ui/panels/workbench_panel_get_process_information_for_port_activity___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...ui/panels/workbench_panel_get_process_responsible_for_the_dns_traffic___response_task.xml b/...ui/panels/workbench_panel_get_process_responsible_for_the_dns_traffic___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/...fault/data/ui/panels/workbench_panel_get_sysmon_wmi_activity_for_host___response_task.xml b/...fault/data/ui/panels/workbench_panel_get_sysmon_wmi_activity_for_host___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/.../ui/panels/workbench_panel_get_web_session_information_via_session_id___response_task.xml b/.../ui/panels/workbench_panel_get_web_session_information_via_session_id___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/.../ui/panels/workbench_panel_investigate_aws_activities_via_region_name___response_task.xml b/.../ui/panels/workbench_panel_investigate_aws_activities_via_region_name___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/.../panels/workbench_panel_investigate_aws_user_activities_by_user_field___response_task.xml b/.../panels/workbench_panel_investigate_aws_user_activities_by_user_field___response_task.xml
@@ -2,7 +2,7 @@
 #############
 # Automatically generated by 'contentctl build' from 
 # https://github.com/splunk/contentctl
-# On Date: 2024-06-26T20:16:59 UTC
+# On Date: 2024-07-01T17:41:43 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############