{
  "ID": "35d666a4-843f-4154-a59c-8f40b2bf6a5b",
  "Name": "[OOTB] Microsoft Products for KUMA 3",
  "Version": 1,
  "ReleasedAt": 1784274398762,
  "Description": "This package contains a normalizer for events produced by Microsoft products for KUMA 3  and additional resources that used for event enrichment. The normalizer supports processing of some event types in the xml format for the following Microsoft products: Microsoft Windows - Security log, Microsoft Windows - System log, Microsoft Network Policy Server, Microsoft - Windows - PowerShell - Operational, Microsoft Windows PowerShell, Microsoft Sysmon, Microsoft Windows Remote Desktop Services, Microsoft Defender, Microsoft Active Directory Federation Service (AD FS), Microsoft Active Directory Domain Service, Microsoft Hyper-V, Microsoft SQL Server, Microsoft Skype for business - Lync Server log, Microsoft Windows - System log - Service Control Manager, Microsoft - Windows - DNS-Server – Audit, Microsoft – Windows - Group Policy - Operational, Microsoft Installer (MSI Installer), Microsoft - Windows - TaskScheduler - Operational, Microsoft - Windows - AppLocker, Microsoft - Windows - WinRM - Operational, Microsoft - Windows - System log - Netlogon",
  "Localization": {
    "ru": {
      "description": "Пакет содержит нормализатор событий для продуктов компании Microsoft для KUMA 3 и дополнительные ресурсы, используемые для обогащения событий. Нормализатор поддерживает обработку некоторых типов событий в формате xml от следующих продуктов Microsoft: Microsoft Windows - Security log, Microsoft Windows - System log, Microsoft Network Policy Server, Microsoft - Windows - PowerShell - Operational, Microsoft Windows PowerShell, Microsoft Sysmon, Microsoft Windows Remote Desktop Services, Microsoft Defender, Microsoft Active Directory Federation Service (AD FS), Microsoft Active Directory Domain Service, Microsoft Hyper-V, Microsoft SQL Server, Microsoft Skype for business - Lync Server log, Microsoft Windows - System log - Service Control Manager, Microsoft - Windows - DNS-Server – Audit, Microsoft – Windows - Group Policy - Operational, Microsoft Installer (MSI Installer), Microsoft - Windows - TaskScheduler - Operational, Microsoft - Windows - AppLocker, Microsoft - Windows - WinRM - Operational, Microsoft - Windows - System log - Netlogon"
    }
  },
  "ResourceIDs": [
    "009cc9e1-218a-4b5b-8130-cab85ea9e8f9",
    "074ee623-4c1c-4fb0-8bf2-40ae90cf43c6",
    "12af8d0e-bdc6-4533-b6ea-135ea30868e0",
    "162fc077-3000-4504-8596-228f35c4c1ba",
    "180e8fcf-c2bc-4ad5-98a3-3c80976400cb",
    "25a9c9cf-9b2d-4c75-a24d-8d40f500b093",
    "2b58e92a-2b60-4a7a-a471-a3113f2aa74a",
    "2d991758-51fd-4707-a27c-c2bba4ab94d2",
    "74dabe56-c51e-4ba5-b524-7c160dcd11fe",
    "768a68ad-d0c6-4337-93ab-a47d54766dd1",
    "7bec5db7-c0d2-4ed9-8ad5-ac4af3fc6fdf",
    "7f77aec8-8747-4800-93c2-4c393410830f",
    "8915fa7d-6ac3-4320-a653-ad3666596706",
    "91c3b6b7-7bf3-483b-bbf5-6e998d5d748b",
    "c4331855-e67f-4f22-9104-96b4ac9fa0e7",
    "cd033aa8-2260-4a78-8d1f-bbb5f014cbae",
    "f2b2e350-8d17-415d-9ef1-f5b332df2e25",
    "f36028f0-9b40-40bc-82f8-3a9c500abb80"
  ],
  "Emergency": false
}