Updated TAs (#4069)

patel-bhavin · web-flow · commit 76dbdce682b4 · 2026-05-07T19:32:10.000+05:30
Co-authored-by: patel-bhavin &lt;7771446+patel-bhavin@users.noreply.github.com&gt;
diff --git a/contentctl.yml b/contentctl.yml
@@ -173,9 +173,9 @@ apps:
 - uid: 4055
   title: Splunk Add-on for Microsoft Office 365
   appid: SPLUNK_ADD_ON_FOR_MICROSOFT_OFFICE_365
-  version: 6.0.1
+  version: 6.0.2
   description: description of app
-  hardcoded_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/splunk-add-on-for-microsoft-office-365_601.tgz
+  hardcoded_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/splunk-add-on-for-microsoft-office-365_602.tgz
 - uid: 5518
   title: Splunk add on for Microsoft Defender Advanced Hunting
   appid: SPLUNK_ADD_ON_FOR_MICROSOFT_DEFENDER_ADVANCED_HUNTING
diff --git a/data_sources/m365_copilot_graph_api.yml b/data_sources/m365_copilot_graph_api.yml
@@ -9,7 +9,7 @@ sourcetype: o365:graph:api
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 6.0.1
+  version: 6.0.2
 fields:
 - appDisplayName
 - appId
diff --git a/data_sources/o365.yml b/data_sources/o365.yml
@@ -17,4 +17,4 @@ separator: Operation
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 6.0.1
+  version: 6.0.2
diff --git a/data_sources/o365_add_app_role_assignment_grant_to_user_.yml b/data_sources/o365_add_app_role_assignment_grant_to_user_.yml
@@ -17,7 +17,7 @@ separator_value: Add app role assignment grant to user.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 6.0.1
+  version: 6.0.2
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_add_app_role_assignment_to_service_principal_.yml b/data_sources/o365_add_app_role_assignment_to_service_principal_.yml
@@ -18,7 +18,7 @@ separator_value: Add app role assignment to service principal.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 6.0.1
+  version: 6.0.2
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_add_mailboxpermission.yml b/data_sources/o365_add_mailboxpermission.yml
@@ -18,7 +18,7 @@ separator_value: Add-MailboxPermission
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 6.0.1
+  version: 6.0.2
 fields:
 - _time
 - AccessRights
diff --git a/data_sources/o365_add_member_to_role_.yml b/data_sources/o365_add_member_to_role_.yml
@@ -17,7 +17,7 @@ separator_value: Add member to role.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 6.0.1
+  version: 6.0.2
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_add_owner_to_application_.yml b/data_sources/o365_add_owner_to_application_.yml
@@ -18,7 +18,7 @@ separator_value: Add owner to application.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 6.0.1
+  version: 6.0.2
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_add_service_principal_.yml b/data_sources/o365_add_service_principal_.yml
@@ -17,7 +17,7 @@ separator_value: Add service principal.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 6.0.1
+  version: 6.0.2
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_change_user_license_.yml b/data_sources/o365_change_user_license_.yml
@@ -17,7 +17,7 @@ separator_value: Change user license.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 6.0.1
+  version: 6.0.2
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_consent_to_application_.yml b/data_sources/o365_consent_to_application_.yml
@@ -18,7 +18,7 @@ separator_value: Consent to application.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 6.0.1
+  version: 6.0.2
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_disable_strong_authentication_.yml b/data_sources/o365_disable_strong_authentication_.yml
@@ -18,7 +18,7 @@ separator_value: Disable Strong Authentication.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 6.0.1
+  version: 6.0.2
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_mailitemsaccessed.yml b/data_sources/o365_mailitemsaccessed.yml
@@ -17,7 +17,7 @@ separator_value: MailItemsAccessed
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 6.0.1
+  version: 6.0.2
 fields:
 - _time
 - AppId
diff --git a/data_sources/o365_modifyfolderpermissions.yml b/data_sources/o365_modifyfolderpermissions.yml
@@ -17,7 +17,7 @@ separator_value: ModifyFolderPermissions
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 6.0.1
+  version: 6.0.2
 fields:
 - _time
 - AppId
diff --git a/data_sources/o365_set_company_information_.yml b/data_sources/o365_set_company_information_.yml
@@ -17,7 +17,7 @@ separator_value: Set Company Information.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 6.0.1
+  version: 6.0.2
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_set_mailbox.yml b/data_sources/o365_set_mailbox.yml
@@ -17,7 +17,7 @@ separator_value: Set-Mailbox
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 6.0.1
+  version: 6.0.2
 fields:
 - _time
 - AppId
diff --git a/data_sources/o365_update_application_.yml b/data_sources/o365_update_application_.yml
@@ -17,7 +17,7 @@ separator_value: Update application.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 6.0.1
+  version: 6.0.2
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_update_authorization_policy_.yml b/data_sources/o365_update_authorization_policy_.yml
@@ -17,7 +17,7 @@ separator_value: Update authorization policy.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 6.0.1
+  version: 6.0.2
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_update_user_.yml b/data_sources/o365_update_user_.yml
@@ -17,7 +17,7 @@ separator_value: Update user.
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 6.0.1
+  version: 6.0.2
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_userloggedin.yml b/data_sources/o365_userloggedin.yml
@@ -17,7 +17,7 @@ separator_value: UserLoggedIn
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 6.0.1
+  version: 6.0.2
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/o365_userloginfailed.yml b/data_sources/o365_userloginfailed.yml
@@ -17,7 +17,7 @@ separator_value: UserLoginFailed
 supported_TA:
 - name: Splunk Add-on for Microsoft Office 365
   url: https://splunkbase.splunk.com/app/4055
-  version: 6.0.1
+  version: 6.0.2
 fields:
 - _time
 - ActorContextId
diff --git a/data_sources/office_365_reporting_message_trace.yml b/data_sources/office_365_reporting_message_trace.yml
@@ -10,7 +10,7 @@ separator: Organization
 supported_TA:
 - name: Splunk Microsoft Office 365 Add-on
   url: https://splunkbase.splunk.com/app/4055
-  version: 6.0.1
+  version: 6.0.2
 fields:
 - FromIP
 - Index
diff --git a/data_sources/office_365_universal_audit_log.yml b/data_sources/office_365_universal_audit_log.yml
@@ -10,7 +10,7 @@ separator: Operation
 supported_TA:
 - name: Splunk Microsoft Office 365 Add-on
   url: https://splunkbase.splunk.com/app/4055
-  version: 6.0.1
+  version: 6.0.2
 fields:
 - _time
 example_log: ''
