Enosys Security Operations has taken it upon ourselves to update a great many values (>200) in the existing Splunk Add-on for Microsoft Office 365 TA as to ensure it is as CIM compliant as possible. Enosys maintains its own 'post process' that is undertaken upon successful deployment of the publicly available TA. This should not detract from the excellent (foundation) work done by the Splunk Inc team to provide this TA. All enhancements are built on the current (Version 2.0) of the TA.