Merge branch 'develop' into remote_emp_fraud

Author: nasbench

contentctl.yml

@@ -185,9 +185,9 @@ apps:
 - uid: 6207
   title: Splunk Add-on for Microsoft Security
   appid: Splunk_TA_MS_Security
-  version: 2.5.1
+  version: 2.5.2
   description: description of app
-  hardcoded_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/splunk-add-on-for-microsoft-security_251.tgz
+  hardcoded_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/splunk-add-on-for-microsoft-security_252.tgz
 - uid: 2734
   title: URL Toolbox
   appid: URL_TOOLBOX

data_sources/ms365_defender_incident_alerts.yml

@@ -16,7 +16,7 @@ sourcetype: ms365:defender:incident:alerts
 supported_TA:
 - name: Splunk Add-on for Microsoft Security
   url: https://splunkbase.splunk.com/app/6207
-  version: 2.5.1
+  version: 2.5.2
 fields:
 - actorName
 - alertId

data_sources/ms_defender_atp_alerts.yml

@@ -16,7 +16,7 @@ sourcetype: ms:defender:atp:alerts
 supported_TA:
 - name: Splunk Add-on for Microsoft Security
   url: https://splunkbase.splunk.com/app/6207
-  version: 2.5.1
+  version: 2.5.2
 fields:
 - column
 - accountName