Welcome to the Community Content Repository. This covers both NG-SIEM and LogScale.
To keep it simple, we'll just use the name CQL Community Content for this repo. What is CQL? It's the CrowdStrike Query Language used in both NG-SIEM and LogScale. There is content in here that applies to both.
This repository contains community and field contributed content which includes:
Lookup Files
...as well as Tutorials and FAQs.
NOTE: These are not meant as replacements for the official documentation or the LogScale Package Marketplace. However, please feel free to use and contribute as much as you'd like.
Here's a quick summary of the various folders in this repository:
The wiki can be found here.
Is something going wrong? GitHub Issues are used to report bugs and errors. You can check to see if anyone else has reported the issue or create a new issue here: Report Issue