This TA provides Splunk's Common Information Model mappings to the Insider Threat data set, R6.1, made available by SEI. You can download the data here: ftp://ftp.sei.cmu.edu/pub/cert-data/r6.1.tar.bz2 The data was created by ExactData LLC for the ADAMS project, an Insider Threat program at DARPA (https://www.cert.org/insider-threat/). There a 10 data sets for the project: https://www.cert.org/insider-threat/tools/index.cfm