Sysmon data dictionary Update

OTRF / OSSEM

Open Source Security Events Metadata (OSSEM)

MIT License

1.22k stars 212 forks source link

Closed Cyb3rPandaH closed 5 years ago

Cyb3rPandaH commented 5 years ago

Event id 3: Field name DestinationHostName is missing.
Event id 15: Field name Hashes should be changed to Hash based on the event XML.
In events 1, 2, 3, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 17, 18 the field name RuleName is missing. The standard name might be tag

Cyb3rWard0g commented 5 years ago

Thank you @Cyb3rPanda ! 👍