Field Mapping: Add OriginalFileName -> Processes.original_file_name

[Rivosyke]

In the file below, it looks like OriginalFileName is missing from the splunk_sysmon_process_creation_cim_mapping dict.

Splunk added Processes.original_file_name in CIM v4.20.2.

https://github.com/SigmaHQ/pySigma-backend-splunk/blob/main/sigma/pipelines/splunk/splunk.py

[thomaspatzke]

Thanks for the hint! Can you provide a pull request?

[Rivosyke]

I was going to but didn't know if there were other sections that needed modification as well. Looks like maybe the tests need to be updated to include that as well but I'll give it a looksee.

[thomaspatzke]

Now it works 😉