Commitbd83e64

committed

add fields

1 parent2b5f705 commitbd83e64Copy full SHA for bd83e64

File tree

-1

lines changed

-1

lines changed

Lines changed: 6 additions & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -13,4 +13,9 @@ field_mapping:`
`13`	`13`	`a1:Command`
`14`	`14`	`a2:Command`
`15`	`15`	`a3:Command`
`16`		`-exe:Process Path`
	`16`	`+exe:Process Path`
	`17`	`+Process CommandLine:Command`
	`18`	`+Image:Process Path`
	`19`	`+username:username`
	`20`	`+LogonId:Logon ID`
	`21`	`+ParentImage:Parent Process Path`

Comments

(0)