Guillaume BOURGEOIS 6bccbb5a50 feat(integrations): declare default ingestion (command, mapper, default type) ...

cortex-xdr, crowdstrike, harfanglab and splunk now ship an `ingestion` block
(fetch command + bundled mapper + default incident type) and a bundled default
incident type under incident-types/, so the instance Collect section is pre-filled
on first configuration and the default type is created on install.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-27 10:38:09 +02:00

..

incident-types

feat(integrations): declare default ingestion (command, mapper, default type)

2026-06-27 10:38:09 +02:00

mappers

feat(cortex-xdr): new Cortex XDR integration — incident ingestion + OCSF mapper, IR actions, standard/advanced auth

2026-06-26 15:28:43 +02:00

scripts

feat(cortex-xdr): full command coverage (50 commands) — endpoints, scripts, exclusions, tags, audits, RBAC, distributions

2026-06-26 15:41:59 +02:00

manifest.yaml

feat(integrations): declare default ingestion (command, mapper, default type)

2026-06-27 10:38:09 +02:00