new o11y secure application detection

[bpluta-splunk]

Details

We are keeping the legacy AppD Secure Application detection until we can get a TA to provide the sourcetype for both AppD and o11y.

Checklist

• [x ] Validate name matches <platform>_<mitre att&ck technique>_<short description> nomenclature
• [ x] CI/CD jobs passed ✔️
• [ x] Validated SPL logic.
• [ x] Validated tags, description, and how to implement.
• [ x] Verified references match analytic.
• [ x] Confirm updates to lookups are handled properly.

[bpluta-splunk]

Screenshots of search being ran against test data