Open sakurai-youhei opened 8 months ago
Issue: network.interface.name and rsa.* fields are listed under the microsoft.defender_atp section on the Microsoft fields doc, but they are supposed to be independent because they originate in different fields.yml.
network.interface.name
rsa.*
microsoft.defender_atp
microsoft.defender_atp.*
Pinging @elastic/sec-windows-platform (Team:Security-Windows Platform)
Issue:
network.interface.name
andrsa.*
fields are listed under themicrosoft.defender_atp
section on the Microsoft fields doc, but they are supposed to be independent because they originate in different fields.yml.network.interface.name
.microsoft.defender_atp.*
andnetwork.interface.name
.