Movatterモバイル変換

Skip to content

UncoderIO/Uncoder_IOPublic

NotificationsYou must be signed in to change notification settings
Fork33
Star165

Commite142d2f

alexvolha

committed

fix qradar mapping

1 parentae3e840 commite142d2fCopy full SHA for e142d2f

File tree

3 files changed

+3

-3

lines changed

uncoder-core/app/translator/mappings/platforms/qradar

3 files changed

+3

-3

lines changed

`‎uncoder-core/app/translator/mappings/platforms/qradar/linux_network_connection.yml‎`

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -8,7 +8,7 @@ log_source:`
`8`	`8`
`9`	`9`	`default_log_source:`
`10`	`10`	`devicetype:11`
`11`		`-category:[4012]`
	`11`	`+category:4012`
`12`	`12`
`13`	`13`	`field_mapping:`
`14`	`14`	`CommandLine:Command`

`‎uncoder-core/app/translator/mappings/platforms/qradar/macos_network_connection.yml‎`

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -8,7 +8,7 @@ log_source:`
`8`	`8`
`9`	`9`	`default_log_source:`
`10`	`10`	`devicetype:102`
`11`		`-category:[4012]`
	`11`	`+category:4012`
`12`	`12`
`13`	`13`	`field_mapping:`
`14`	`14`	`CommandLine:Command`

`‎uncoder-core/app/translator/mappings/platforms/qradar/windows_network_connection.yml‎`

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -9,7 +9,7 @@ log_source:`
`9`	`9`
`10`	`10`	`default_log_source:`
`11`	`11`	`devicetype:12`
`12`		`-category:[4012]`
	`12`	`+category:4012`
`13`	`13`	`qideventcategory:Microsoft-Windows-Sysmon/Operational`
`14`	`14`
`15`	`15`	`field_mapping:`

0 commit comments

Comments

(0)

[8]ページ先頭

©2009-2025 Movatter.jp