Added parser and fixed schema for Sysmon version 14.0

OTRF / OSSEM

Open Source Security Events Metadata (OSSEM)

MIT License

1.22k stars 212 forks source link

Added parser and fixed schema for Sysmon version 14.0 #125

Closed szabolevo closed 1 year ago

szabolevo commented 1 year ago

- Fixed schema for Sysmon version 14.0: the metadata left in the XML was causing XML syntax error when using ossemSysmonKQLParser.py - Added parser for Sysmon version 14.0: generated using ossemSysmonKQLParser.py

Cyb3rWard0g commented 1 year ago

Thank you very much @szabolevo !!