Commitd9d5b0d

committed

Improve AQL mapping logic; Palo Alto add support keywords; Sigma add mapping

1 parent4b2a641 commitd9d5b0dCopy full SHA for d9d5b0d

File tree

-1

lines changed

-1

lines changed

Lines changed: 2 additions & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -4,7 +4,8 @@ description: Text that describe current mapping`
`4`	`4`
`5`	`5`	`log_source:`
`6`	`6`	`product:[windows]`
`7`		`-service:[powershell, ps_classic_provider_start, ps_classic_script, ps_classic_start, ps_module, ps_script]`
	`7`	`+service:[powershell]`
	`8`	`+category:[ps_classic_provider_start, ps_classic_script, ps_classic_start, ps_module, ps_script]`
`8`	`9`
`9`	`10`	`default_log_source:`
`10`	`11`	`product:windows`

Comments

(0)