Mapping update (AWS) - mapping Sysmon 26 - Githubissues

OTRF / OSSEM-DM

OSSEM Detection Model

MIT License

167 stars 43 forks source link

Mapping update (AWS) - mapping Sysmon 26 #13

Closed Cyb3rPandaH closed 3 years ago

Cyb3rPandaH commented 3 years ago

AWS mappping update: audit_category = eventType
Sysmon 26:
- user deleted file
- process deleted file