Merge pull request #3622 from splunk/auto-ta-update-341

ljstella · web-flow · commit 6ac8e21af51d · 2025-07-29T08:03:19.000-05:00
Automated Splunk TA Update 341
diff --git a/contentctl.yml b/contentctl.yml
@@ -167,9 +167,9 @@ apps:
 - uid: 4055
   title: Splunk Add-on for Microsoft Office 365
   appid: SPLUNK_ADD_ON_FOR_MICROSOFT_OFFICE_365
-  version: 4.8.1
+  version: 4.9.0
   description: description of app
-  hardcoded_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/splunk-add-on-for-microsoft-office-365_481.tgz
+  hardcoded_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/splunk-add-on-for-microsoft-office-365_490.tgz
 - uid: 2890
   title: Splunk Machine Learning Toolkit
   appid: SPLUNK_MACHINE_LEARNING_TOOLKIT
@@ -248,5 +248,5 @@ apps:
   hardcoded_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/splunk-add-on-for-vmware-indexes_403.tgz
 githash: d6fac80e6d50ae06b40f91519a98489d4ce3a3fd
 test_data_caches:
-  - base_url: https://media.githubusercontent.com/media/splunk/attack_data/master/
-    base_directory_name: external_repos/attack_data
+- base_url: https://media.githubusercontent.com/media/splunk/attack_data/master/
+  base_directory_name: external_repos/attack_data
diff --git a/data_sources/o365.yml b/data_sources/o365.yml
@@ -17,4 +17,4 @@ separator: Operation
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 4.8.1
+  version: 4.9.0
diff --git a/data_sources/o365_add_app_role_assignment_grant_to_user_.yml b/data_sources/o365_add_app_role_assignment_grant_to_user_.yml
@@ -17,7 +17,7 @@ separator_value: Add app role assignment grant to user.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 4.8.1
+  version: 4.9.0
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_add_app_role_assignment_to_service_principal_.yml b/data_sources/o365_add_app_role_assignment_to_service_principal_.yml
@@ -18,7 +18,7 @@ separator_value: Add app role assignment to service principal.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 4.8.1
+  version: 4.9.0
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_add_mailboxpermission.yml b/data_sources/o365_add_mailboxpermission.yml
@@ -18,7 +18,7 @@ separator_value: Add-MailboxPermission
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 4.8.1
+  version: 4.9.0
 fields:
 - _time
 - AccessRights
diff --git a/data_sources/o365_add_member_to_role_.yml b/data_sources/o365_add_member_to_role_.yml
@@ -17,7 +17,7 @@ separator_value: Add member to role.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 4.8.1
+  version: 4.9.0
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_add_owner_to_application_.yml b/data_sources/o365_add_owner_to_application_.yml
@@ -18,7 +18,7 @@ separator_value: Add owner to application.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 4.8.1
+  version: 4.9.0
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_add_service_principal_.yml b/data_sources/o365_add_service_principal_.yml
@@ -17,7 +17,7 @@ separator_value: Add service principal.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 4.8.1
+  version: 4.9.0
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_change_user_license_.yml b/data_sources/o365_change_user_license_.yml
@@ -17,7 +17,7 @@ separator_value: Change user license.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 4.8.1
+  version: 4.9.0
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_consent_to_application_.yml b/data_sources/o365_consent_to_application_.yml
@@ -18,7 +18,7 @@ separator_value: Consent to application.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 4.8.1
+  version: 4.9.0
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_disable_strong_authentication_.yml b/data_sources/o365_disable_strong_authentication_.yml
@@ -18,7 +18,7 @@ separator_value: Disable Strong Authentication.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 4.8.1
+  version: 4.9.0
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_mailitemsaccessed.yml b/data_sources/o365_mailitemsaccessed.yml
@@ -17,7 +17,7 @@ separator_value: MailItemsAccessed
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 4.8.1
+  version: 4.9.0
 fields:
 - _time
 - AppId
diff --git a/data_sources/o365_modifyfolderpermissions.yml b/data_sources/o365_modifyfolderpermissions.yml
@@ -17,7 +17,7 @@ separator_value: ModifyFolderPermissions
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 4.8.1
+  version: 4.9.0
 fields:
 - _time
 - AppId
diff --git a/data_sources/o365_set_company_information_.yml b/data_sources/o365_set_company_information_.yml
@@ -17,7 +17,7 @@ separator_value: Set Company Information.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 4.8.1
+  version: 4.9.0
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_set_mailbox.yml b/data_sources/o365_set_mailbox.yml
@@ -17,7 +17,7 @@ separator_value: Set-Mailbox
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 4.8.1
+  version: 4.9.0
 fields:
 - _time
 - AppId
diff --git a/data_sources/o365_update_application_.yml b/data_sources/o365_update_application_.yml
@@ -17,7 +17,7 @@ separator_value: Update application.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 4.8.1
+  version: 4.9.0
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_update_authorization_policy_.yml b/data_sources/o365_update_authorization_policy_.yml
@@ -17,7 +17,7 @@ separator_value: Update authorization policy.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 4.8.1
+  version: 4.9.0
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_update_user_.yml b/data_sources/o365_update_user_.yml
@@ -17,7 +17,7 @@ separator_value: Update user.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 4.8.1
+  version: 4.9.0
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_userloggedin.yml b/data_sources/o365_userloggedin.yml
@@ -17,7 +17,7 @@ separator_value: UserLoggedIn
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 4.8.1
+  version: 4.9.0
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_userloginfailed.yml b/data_sources/o365_userloginfailed.yml
@@ -17,7 +17,7 @@ separator_value: UserLoginFailed
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 4.8.1
+  version: 4.9.0
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/office_365_reporting_message_trace.yml b/data_sources/office_365_reporting_message_trace.yml
@@ -10,7 +10,7 @@ separator: Organization
 supported_TA:
 - name: Splunk Microsoft Office 365 Add-on
   url: https://splunkbase.splunk.com/app/4055
-  version: 4.8.1
+  version: 4.9.0
 fields:
 - FromIP
 - Index
diff --git a/data_sources/office_365_universal_audit_log.yml b/data_sources/office_365_universal_audit_log.yml
@@ -10,7 +10,7 @@ separator: Operation
 supported_TA:
 - name: Splunk Microsoft Office 365 Add-on
   url: https://splunkbase.splunk.com/app/4055
-  version: 4.8.1
+  version: 4.9.0
 fields:
 - _time
 example_log: ''
