Closed john-floren-gravwell closed 8 months ago
In the Zeek TSV format, they used T/F. In Corelight JSON, it's true/false. Make sure all scheduled searches etc. are updated.
In the Zeek TSV format, they used T/F. In Corelight JSON, it's true/false. Make sure all scheduled searches etc. are updated.