{
  "ID": "5245c75d-6e3e-439d-bfa5-bf54d660e5a2",
  "Name": "[OOTB] Microsoft Products via KES WIN NG for KUMA 4.0.1",
  "Version": 1,
  "ReleasedAt": 1784295300303,
  "Description": "This package contains a normalizer for some event types that generated by Microsoft Products and transferred to KUMA by the KES WIN (version 12.11) in json format. The normalizer supports processing of some event types in the xml format for the following Microsoft products: Microsoft Windows - Security log, Microsoft Windows - System log, Microsoft Network Policy Server, Microsoft - Windows - PowerShell - Operational, Microsoft Windows PowerShell, Microsoft Sysmon, Microsoft Windows Remote Desktop Services, Microsoft Defender, Microsoft Active Directory Federation Service (AD FS), Microsoft Active Directory Domain Service, Microsoft Hyper-V, Microsoft SQL Server, Microsoft Skype for business - Lync Server log, Microsoft Windows - System log - Service Control Manager, Microsoft - Windows - DNS-Server – Audit, Microsoft – Windows - Group Policy - Operational, Microsoft Installer (MSI Installer), Microsoft - Windows - TaskScheduler - Operational, Microsoft - Windows - AppLocker, Microsoft - Windows - WinRM - Operational, Microsoft - Windows - System log - Netlogon",
  "Localization": {
    "ru": {
      "description": "Пакет содержит нормализатор для некоторых типов событий аудита, генерируемых продуктами компании Microsoft и передаваемых c помощью KES WIN (версии 12.11) в формате JSON. Нормализатор поддерживает обработку некоторых типов событий в формате xml от следующих продуктов Microsoft: Microsoft Windows - Security log, Microsoft Windows - System log, Microsoft Network Policy Server, Microsoft - Windows - PowerShell - Operational, Microsoft Windows PowerShell, Microsoft Sysmon, Microsoft Windows Remote Desktop Services, Microsoft Defender, Microsoft Active Directory Federation Service (AD FS), Microsoft Active Directory Domain Service, Microsoft Hyper-V, Microsoft SQL Server, Microsoft Skype for business - Lync Server log, Microsoft Windows - System log - Service Control Manager, Microsoft - Windows - DNS-Server – Audit, Microsoft – Windows - Group Policy - Operational, Microsoft Installer (MSI Installer), Microsoft - Windows - TaskScheduler - Operational, Microsoft - Windows - AppLocker, Microsoft - Windows - WinRM - Operational, Microsoft - Windows - System log - Netlogon"
    }
  },
  "ResourceIDs": [
    "009cc9e1-218a-4b5b-8130-cab85ea9e8f9",
    "074ee623-4c1c-4fb0-8bf2-40ae90cf43c6",
    "12af8d0e-bdc6-4533-b6ea-135ea30868e0",
    "162fc077-3000-4504-8596-228f35c4c1ba",
    "180e8fcf-c2bc-4ad5-98a3-3c80976400cb",
    "25a9c9cf-9b2d-4c75-a24d-8d40f500b093",
    "2b58e92a-2b60-4a7a-a471-a3113f2aa74a",
    "2d991758-51fd-4707-a27c-c2bba4ab94d2",
    "4a8d9a66-a563-464c-add2-c0bb4cb3e2f8",
    "74dabe56-c51e-4ba5-b524-7c160dcd11fe",
    "768a68ad-d0c6-4337-93ab-a47d54766dd1",
    "7bec5db7-c0d2-4ed9-8ad5-ac4af3fc6fdf",
    "7f77aec8-8747-4800-93c2-4c393410830f",
    "8915fa7d-6ac3-4320-a653-ad3666596706",
    "91c3b6b7-7bf3-483b-bbf5-6e998d5d748b",
    "c4331855-e67f-4f22-9104-96b4ac9fa0e7",
    "cd033aa8-2260-4a78-8d1f-bbb5f014cbae",
    "f2b2e350-8d17-415d-9ef1-f5b332df2e25",
    "f36028f0-9b40-40bc-82f8-3a9c500abb80"
  ],
  "Emergency": false
}