Hy, By reading the documentation, it seems like the Splunk ESCU app is build with contentctl from its git content GitHub - splunk/security_content: Splunk Security Content. I tried with several release, the latest included: Release v5.1.0 · splunk/security_content · GitHub. The build constantly fail.  A whole bunch of: " Error: 1 validation error for Detection Value error, Found 1 issues when resolving references Security Content Object names: - Failed to find the following 'DataSource' " Did I miss something? I tried finding a switch to ignore the errors and build the app anyway without success. The dist directory remain empty. I used a clean Ubuntu 24.04.2 LTS and used : apt update apt full-upgrade reboot now apt update apt install pipx pipx ensurepath reboot now pipx install contentctl wget https://github.com/splunk/security_content/archive/refs/tags/v5.1.0.tar.gz tar -xzf v5.1.0.tar.gz cd security_content-5.1.0/ contentctl build ... View more