{
  "id": "35d666a4-843f-4154-a59c-8f40b2bf6a5b",
  "name": "[OOTB] Microsoft Products for KUMA 3",
  "version": 2,
  "releasedAt": 1788429888292,
  "changelogs": [
    {
      "version": 1,
      "released_at": "2026-07-29T14:47:50Z",
      "items": [
        {
          "text": {
            "en": "Initial release",
            "ru": "Первый релиз"
          }
        }
      ]
    },
    {
      "version": 2,
      "released_at": "2026-09-03T10:04:48Z",
      "items": [
        {
          "text": {
            "en": "The package was updated.",
            "ru": "Пакет обновлен"
          }
        }
      ]
    }
  ],
  "description": "This package contains a normalizer for events produced by Microsoft products for KUMA 3  and additional resources that used for event enrichment. The normalizer is designed to process events incoming from the Microsoft products in the XML format. The normalizer supports processing of some event types in the XML format for the following Microsoft products:\n- Microsoft Windows - Security log\n- Microsoft Windows - System log\n- Microsoft Network Policy Server\n- Microsoft-Windows - PowerShell - Operational\n- Microsoft Windows PowerShell\n- Microsoft Sysmon\n- Microsoft Windows Remote Desktop Services\n- Microsoft Defender\n- Microsoft Active Directory Federation Service (AD FS)\n- Microsoft Active Directory Domain Service (AD DS)\n- Microsoft Hyper-V\n- Skype for Business - Lync Server log\n- Microsoft Windows - System log - Service Control Manager\n- Microsoft - Windows - DNS-Server - Audit\n- Microsoft – Windows - Group Policy - Operational\n- Microsoft Installer (MSI Installer)\n- Microsoft - Windows - TaskScheduler - Operational\n- Microsoft - Windows - AppLocker\n- Microsoft - Windows - WinRM - Operational \n- Microsoft - Windows - System log - Netlogon",
  "localization": {
    "ru": {
      "description": "Нормализатор предназначен для обработки событий, поступающих от систем компании Microsoft. Нормализатор поддерживает обработку некоторых типов событий в формате XML от следующих продуктов Microsoft:\n- Microsoft Windows - Security log\n- Microsoft Windows - System log\n- Microsoft Network Policy Server\n- Microsoft - Windows - PowerShell - Operational\n- Microsoft Windows PowerShell\n- Microsoft Sysmon\n- Microsoft Windows Remote Desktop Services\n- Microsoft Defender\n- Microsoft Active Directory Federation Service (AD FS)\n- Microsoft Active Directory Domain Service (AD DS)\n- Microsoft Hyper-V\n- Skype for Business - Lync Server log\n- Microsoft Windows - System log - Service Control Manager\n- Microsoft - Windows - DNS-Server - Audit\n- Microsoft – Windows - Group Policy - Operational\n- Microsoft Installer (MSI Installer)\n- Microsoft - Windows - TaskScheduler - Operational\n- Microsoft - Windows - AppLocker\n- Microsoft - Windows - WinRM - Operational\n- Microsoft - Windows - System log - Netlogon"
    }
  },
  "resourceIds": [
    "009cc9e1-218a-4b5b-8130-cab85ea9e8f9",
    "074ee623-4c1c-4fb0-8bf2-40ae90cf43c6",
    "12af8d0e-bdc6-4533-b6ea-135ea30868e0",
    "162fc077-3000-4504-8596-228f35c4c1ba",
    "180e8fcf-c2bc-4ad5-98a3-3c80976400cb",
    "25a9c9cf-9b2d-4c75-a24d-8d40f500b093",
    "2b58e92a-2b60-4a7a-a471-a3113f2aa74a",
    "2d991758-51fd-4707-a27c-c2bba4ab94d2",
    "74dabe56-c51e-4ba5-b524-7c160dcd11fe",
    "768a68ad-d0c6-4337-93ab-a47d54766dd1",
    "7bec5db7-c0d2-4ed9-8ad5-ac4af3fc6fdf",
    "7f77aec8-8747-4800-93c2-4c393410830f",
    "8915fa7d-6ac3-4320-a653-ad3666596706",
    "91c3b6b7-7bf3-483b-bbf5-6e998d5d748b",
    "c4331855-e67f-4f22-9104-96b4ac9fa0e7",
    "cd033aa8-2260-4a78-8d1f-bbb5f014cbae",
    "f2b2e350-8d17-415d-9ef1-f5b332df2e25",
    "f36028f0-9b40-40bc-82f8-3a9c500abb80"
  ],
  "emergency": false
}


